AnsweredAssumed Answered

Validate Event Time Function in Log Parser Tool

Question asked by Maximiliano Cittadini on Jan 17, 2018

I'm currently working in a parser for a customer and one of the metas that I'm parsing is a string containing the date/time of the event. I have used the event time function to try to parse this string and put the result into event_time meta. The problem is, when I deployed the parser to the decoder and try to parse an event, all of them gave me a "parse.error EVENTTIME".  I'm pretty sure that the tokens that I'm using to parse the event are wrong, but I found a little frustrating to have to modify the parser, re deploy, and wait for an event to match... I wonder if there is any way to try out the functions of the parser without have to deploying it every time.

 

Thanks in advance,

Max

Outcomes