Hi Gururaj, RSYSLOG_FileFormat is what the server would use when writing logs to files (so that you'll have the high-precision timestamp in the file). On the client, however, you should use RSYSLOG_ForwardFormat or RSYSLOG_SyslogProtocol23Format to make sure the high-precision timestamp is preserved across the wire. Then it should work, assuming that the input comes with a high-precision timestamp in the first place (imuxsock does that by default).
Best regards, Radu -- Performance Monitoring * Log Analytics * Search Analytics Solr & Elasticsearch Support * http://sematext.com/ On Fri, Jun 12, 2015 at 5:36 PM, Gururaj Maddodi <[email protected]> wrote: > Hi, > > I'm logging from several machines to a centralised location. In both the > server and the clients I've set the configuration as below, > > $ActionFileDefaultTemplate RSYSLOG_FileFormat > > for more accurate timestamp. But on the server I see that the timestamp is > accurate only upto seconds. But on the clients I see the logs are more > accurate. Please help me in resolving this issue? > > Thanks. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
