Need help on grok pattern

regex

#1

Hi guys…

Need your help to prepare grok pattern for below.

Totaltime=12:47.033s

Appreciated your help…


#2

What is 12:47.033s ?


#3

It’s the time stamp in our logs


#4

You’ll understand my confusion, as the label is “Totaltime” and it’s postfixed with “s”

So are you suggesting that “Totaltime” is the value “12:47.033” is 12:47PM today?


#5

Its time taken to complete one of my job …


#6

(?<duration>\d+:\d+.\d+)[nuµm]?s

This will be stored as a String and not as a number, as the colon isn’t valid.


#7

Thanks alot for your help… It’s working now