-- convert raw logs into space delimited logs comby -timeout 30 ':[date.] :[hr]::[m]::[s],:[ms] [:[ ]:[thread]][ :[logger]: :[level]] :[message\n]' ':[date] :[hr]::[m]::[s].:[ms] :[thread] :[level] :[logger] :[message]' testlog.log -stdout > combyresults.log -- ingest logs using seqcli seqcli ingest -i combyresults.log -p source=comby -x "{@t:timestamp} {ThreadId:nat} {@l:level} {:*}{SourceContext:*} {@m:*}{:n}{@x:*}"