I have one xml file
I want to extract (at search time) the fields/values IN BETWEEN and and throw away any of the lines before the very first and after the very last .
(In XML, the fields/values are located on each line in the form value)
4. Use the date in the ActionDate field and the time in the ActionTime field as the timestamp.-423423445345345.10742916222947 Inteccccn 20 Iwildwood 2013-04-24 00:07:00 0 -80.23429525620114,24.08680387475695 local
below is my props.conf and transforms.conf
props.conf
[dreamcrusher]
BREAK_ONLY_BEFORE =
DATETIME_CONFIG =
NO_BINARY_CHECK = true
TIME_FORMAT =
TIME_PREFIX =
category = Custom
disabled = false
pulldown_type = true
PREAMBLE_REGEX = ^<\S+.*
REPORT-dream = dream
transforms.conf
[dream]
REGEX = ^\<(.*?)\>(\S+)\<
FORMAT = $1::$2
======
when i check the events there are no search time extraction
↧