We are currently loading IBM Websphere log files but we are having trouble parsing the timestamp format in the logs.
We tried to use several different formats, but none is creating a valid timestamp. This is very important because 90% of our logs are from Websphere and all of them are using the same timestamp format.
The main issue is related with the fraction of seconds, they are using ':' instead of '.' or ',' meaning I can't use %f
Hope you can help
Content example:
[06-12-2018 11:02:05:621 WAT] 00021b4d NodeSyncTask A ADMS0003I: The configuration synchronization completed successfully.
[06-12-2018 10:58:17:839 WAT] 00000062 InputStreamCa W json rpc temp folder /usr/IBM/WebSphere85/AppServer/profiles/adremdbpm1/temp/jsonstreams/server deleted.
parser configuration example (I tried so many different 😞
[parser|systems_trace_log_parser]
base_parser=clf
format=[%{%d-%m-%Y %H:%M:%S}t:%i %i] %i %{tipoEvento}i %{severityEvento}i
kind regards,
Álvaro Menezes
