master6847
The extraction in the image is "date" for the example "MyParsingRule %{word:user} connected on %{date("MM/dd/yyyy"):connect_date}" Remove "connect_" to reflect the key in the image.
The extraction in the image is "date" for the example "MyParsingRule %{word:user} connected on %{date("MM/dd/yyyy"):connect_date}" Remove "connect_" to reflect the key in the image.