#!/usr/bin/env perl
use warnings;
use strict;
use 5.010; # for /p and ${^MATCH}
use DateTime;
use DateTime::Format::Strptime;
use Text::CSV;

my $strp_one = DateTime::Format::Strptime->new(on_error=>'croak',
	time_zone=>'UTC', pattern => '%Y-%m-%dT%H:%M:%S.%6N');
my $strp_two = DateTime::Format::Strptime->new(on_error=>'croak',
	time_zone=>'UTC',  pattern => '%a %b %d %H:%M:%S %Y');
my $csv = Text::CSV->new({binary=>1, always_quote=>1, blank_is_undef=>1,
	eol=>$/, auto_diag=>2});

while (<DATA>) {
	chomp;
	if (/^\d{4,}-[\d\-T\:\.]+(?=\s+)/p) {
		my ($dts,$rest) = (${^MATCH}, ${^POSTMATCH});
		my $dt = $strp_one->parse_datetime($dts);
		# parse "$rest" and break it into more fields here
		$csv->print(select, [
			$dt->strftime('%Y-%m-%d-%H-%M-%S-%6N-%Z'),
			$rest ] );
	}
	elsif (/^\w+\s+\w+\s+\d+\s+[\d\:]+\s+\d{4,}(?=\s+)/p) {
		my ($dts,$rest) = (${^MATCH}, ${^POSTMATCH});
		my $dt = $strp_two->parse_datetime($dts);
		# parse "$rest" and break it into more fields here
		$csv->print(select, [
			$dt->strftime('%Y-%m-%d-%H-%M-%S-%6N-%Z'),
			$rest ] );
	}
	else
		{ warn "Skipping unknown line format: $_" }
}

__DATA__
2017-02-20T09:30:53.177000 20[] 0000000000000000 Error Description One
Mon Feb 20 09:31:25 2017 [INFO] [AGENTEXEC] Error Description Two
2017-02-20T09:30:53.177000 20[] 0000000000000000 Error Description Three
Mon Feb 20 09:31:25 2017 [INFO] [AGENTEXEC] Error Description Four