https://www.logfusion.ca/Discussions/RSS/?TopicID=018b7027-8b55-7756-a86e-6b5da7703621 LogFusion RSS: Columns parsing method for journalctl Thu, 30 Apr 2026 16:37:01 GMT en hourly 1 https://www.logfusion.ca/Discussions/RSS/?TopicID=018b7027-8b55-7756-a86e-6b5da7703621 https://www.logfusion.ca/Discussions/View/columns-parsing-method-for-journalctl/?ID=018b7027-8b55-7756-a86e-6b5da7703621#3 Sat, 28 Oct 2023 12:21:03 GMT Binary Fortress Software https://www.logfusion.ca/Discussions/View/columns-parsing-method-for-journalctl/?ID=018b7027-8b55-7756-a86e-6b5da7703621#3 LogFusion Hi and thank you for the answer.
Yes, this feature would be really great. The issue with basic separation is that not many traces use them this way. What would be something worth considering, is separating based on the number of characters, as traces headers often have a fixed number of these.

But regex would probably take care of that too, thank you! ]]> https://www.logfusion.ca/Discussions/View/columns-parsing-method-for-journalctl/?ID=018b7027-8b55-7756-a86e-6b5da7703621#2 Fri, 27 Oct 2023 19:03:11 GMT Binary Fortress Software https://www.logfusion.ca/Discussions/View/columns-parsing-method-for-journalctl/?ID=018b7027-8b55-7756-a86e-6b5da7703621#2 LogFusion The column parser is really basic, it basically just looks for the separator character(s) you specify and then does a split on that. This journalctl log line isn't really great for that because it's just using spaces, and as you mentioned, some of the fields you want to break out into columns have spaces in them as well.

I think to do this LogFusion would need to support RegEx for column separators. I'm not sure how feasible that is to add, but I've put it on our feature request list

Thanks! ]]> https://www.logfusion.ca/Discussions/View/columns-parsing-method-for-journalctl/?ID=018b7027-8b55-7756-a86e-6b5da7703621 Fri, 27 Oct 2023 08:02:02 GMT Binary Fortress Software https://www.logfusion.ca/Discussions/View/columns-parsing-method-for-journalctl/?ID=018b7027-8b55-7756-a86e-6b5da7703621 LogFusion Hello,
I own a Logfusion licence for a while now, but each time I tried to use it, I somehow wasn;t able to figure out how to configure the parsing for the created columns... I was wondering whether someone more proficcient would know how to create a config for journalctl log parsing, where the following columns are made:

Date and time.
Host.
Log source.
Log message.

Exemplary log line:

Aug 15 00 55:36 abc xyz[301]: EID=24, ComponentIndex=1, Offset=6714368, Length=4096

The separations are made with spaces, which are also included in the date.
I would appreciate all help. ]]>