Currently the alert.log is read line by line and each line is considered as a log record. But one alert.log record can have several lines, for example:
YYYY-MM-DD 10:42:35.569000 -04:00 <-START OF LOGICAL RECORD
Errors in file /opt/app/oracle/diag/rdbms/SID/trace/SID_ora_5868.trc:
ORA-01013: user requested cancel of current operation
YYYY-MM-DD 10:43:15.722000 -04:00 <-START OF NEXT LOGICAL RECORD
The two rows belong to one record.
Is it possible to collect the alert.log records based on the time stamp and not line by line?