Need help on grok pattern

Hi guys…

Need your help to prepare grok pattern for below.

Totaltime=12:47.033s

Appreciated your help…

What is 12:47.033s ?

It’s the time stamp in our logs

You’ll understand my confusion, as the label is “Totaltime” and it’s postfixed with “s”

So are you suggesting that “Totaltime” is the value “12:47.033” is 12:47PM today?

Its time taken to complete one of my job …

(?<duration>\d+:\d+.\d+)[nuµm]?s

This will be stored as a String and not as a number, as the colon isn’t valid.

Thanks alot for your help… It’s working now