Ayehu Log Parsing - Splunk

TODO
1.  Pull date from source file name  (fileName_23052018.log)
2.  (DONE) Pull time from line entry
3.  (DONE) Send to null queue -> "First line of every file"
4.  (DONE) Send to null queue -> "Lines with -------------------------------"    

props.conf
[Ayehu:EyeShare:Executor]
TRUNCATE=0
TIME_FORMAT=%X
TIME_PREFIX = \[
MAX_TIMESTAMP_LOOKAHEAD = 30
SHOULD_LINEMERGE = false
LINE_BREAKER = (-------------------------------[\n\r]+)

fileName_23052018.log
[23-05-18 00:00:05] : Log starting. Configuration: Log Level: 3, Days to hold back: 14
[00:00:05] : Queue: EventNumber:EventNumberhere ActivityName: Auth_Token1 RequestID: RequestsIDHere
-------------------------------
[00:00:05] : Total in queue: 1
-------------------------------
[00:00:05] : Dequeue: some text here
-------------------------------
[00:00:05] : Executing some text here
-------------------------------
[00:00:05] : Result: EventNumber:EventNumberHere ActivityName: Auth_Token1 RequestID: requestIDHere Result: <NewDataSet>
  <xs:schema id="NewDataSet" xmlns="" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
    <xs:element name="NewDataSet" msdata:IsDataSet="true" msdata:MainDataTable="resultSet" msdata:UseCurrentLocale="true">
      <xs:complexType>
        <xs:choice minOccurs="0" maxOccurs="unbounded">
          <xs:element name="resultSet">
            <xs:complexType>
              <xs:sequence>
                <xs:element name="Result" type="xs:string" minOccurs="0" />
              </xs:sequence>
            </xs:complexType>
          </xs:element>
        </xs:choice>
      </xs:complexType>
    </xs:element>
  </xs:schema>
  <resultSet>
    <Result>"some data here"</Result>
  </resultSet>
</NewDataSet>
-------------------------------
[00:00:05] : Executing acknowledge OK Auth_Token1 tokenDataHere