AnsweredAssumed Answered

Parse error Convert Fail event.time while parsing CEF

Question asked by Maximiliano Cittadini on Jan 29, 2018
Latest reply on Jan 31, 2018 by Maximiliano Cittadini

In common parser, using the Log Parser Tool I can use the a time function to tell the parser how to exactly parse Date/Time data in the event. But I don't know if its possible to do so using a CEF parser....

My date format is: MM-DD-YYYY HH:MM:SS,mmm (01-25-2018 09:48:32,442) [24 hours format]

 

Any suggestions?

Regards,

Max

Outcomes