Hi Naushad, I'm using 11.0.1 version or RSA SA. I don't see the
statistic parameter "packet.oldest.file.time" listed under Decoder/Log
Decoder. Can you suggest any workaround? Thanks in advance.
Regards,Mansoor Ilahi
If you are still facing this issue, the solution is you got to take each
attribute separately. For instance, "Apr" as "month" "12" as "date" and
so on.. Space serves as a delimiter while building a parser so if you
add entire string with spaces as on...