Search Results

That works well.

One thing I ommitted was that the message elements is actually a text string so each record is more of the format

2009-07-27T08:08:18Z T-6769544753 D | this is some log entry
...

Given that I have a log file of the format:

DATE ID LOG_LEVEL | EVENT
2009-07-23T14:05:11Z T-4030097550 D | MessX
2009-07-23T14:10:44Z T-4030097550 D | MessY
2009-07-23T14:34:08Z T-7298651656 D...