I am going through this sample project in my lab but i found that it is not working properly.
There are some logs which are not parsed by the parser. It creates event in .csv with real timestamp (not from log file) and not a single field is populated for this event.
I am using this method for different log format. However, in my case only first extraprocessor parser is considered by connector and whole file is parsed using that extraprocessor parser.
Is there any change that we have to do in agent.properties file, so that this issue can be solved.
Please give me proper solution ASAP!!!!!