Hello,
On 02/07/2021 16:52, Илья Шипицин wrote:
I worked with log formats a lot, couple of thoughts
1) tab separated is better for any log import tool (mixing spaces and
"/" is terrible for import)
I don't have any problems with that apart from inconsistency with the
other default formats. If switching to tabs for this format only does
not bother anyone I'll do it.
2) time should be iso8601
For now the "format" field of the "log" option only applies to the log
line header (containing the timestamp and process_name/pid). It could be
nice that it applies also to all time related fields of the log format.
I'll try to see if it is easily feasible.
Thanks
Rémi