Use tokens 1* with the dash as the delimiter, for each line, and use the * token for your fields, all except the last (hint: it starts "Timestamp") where you do another for /f on the second token, using 1* with the space as the delimiter, and take the first token.