Hi, I don't think parsedate() would work with this format, though strptime() should. You are missing the capturing for $1 to hold any value, i.e. the regexp should be: /(^\d\d.\d\d.\d\d\d\d\s\d\d:\d\d:\d\d)/
Regards, Botond On Mon, 28 Jul 2014 18:07:28 -0400 Chris <didji...@gmail.com> wrote: > Thanks. Seems I'm getting farther, but still having a cruddy time with this > date. > > I have a date format like so: > > 06/15/2014 13:18:14,146 > > Seems like I should be able to do this: > Exec if $raw_event =~ /^\d\d.\d\d.\d\d\d\d\s\d\d:\d\d:\d\d/ > $EventReceivedTime = strptime($1, '%m/%d/%y %H:%M:%S'); > > I also tried: > Exec if $raw_event =~ /^\d\d.\d\d.\d\d\d\d\s\d\d:\d\d:\d\d/ $EventTime = > parsedate($1); > > Both are coming back null. > ({"EventReceivedTime":null,"SourceModuleName":"in1","SourceModuleType":"im_file","EventTime":null, > > I need a beer... > > Chris ------------------------------------------------------------------------------ Infragistics Professional Build stunning WinForms apps today! Reboot your WinForms applications with our WinForms controls. Build a bridge from your legacy apps to the future. http://pubads.g.doubleclick.net/gampad/clk?id=153845071&iu=/4140/ostg.clktrk _______________________________________________ nxlog-ce-users mailing list nxlog-ce-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users