PROCESS,HOST,LOGFILE,FORMAT,$1,$2
foo,host99,/var/adm/foo.log,\s+\S+\s+(\S+)\s+(\d+\-\d+\-\d+\s\d+:\d+:\d+:\s\w{2}),PROC,TIMESTAMP