Hi Dwadlle, Thank you for your prompt response. The log file has both events based on timestamp and configuration section. Can we use what you suggested just for the configuration section and use time stamp for rest of the log? Or do you recommend 2 different queries - one for parsing the time stamp and other for parsing the configuration section? With Best Wishes, subba ... View more