On Wed, 17 Jun 2015, Andrew Couzens wrote:

Hello,

I'm looking to preserve the time stamp of a message by rsyslog 5 but am 
experiencing a problem.

Here is the message received by rsyslog:

[pid 17587] recvmsg(0, {msg_name(0)=NULL, msg_iov(1)=[{"<134>Jun 17 14:05:57

Here is how it logs it out:

[pid 17585] write(4, "2015-06-17T11:05:57.657288-07:00

Here is my config:

$template FileFormatFromhost,"%TIMESTAMP:::date-rfc3339% ...
$template ForwardFormatFromhost,"<%PRI%>%TIMESTAMP:::date-rfc3339% ...

Any thoughts?

what if you just do %timestamp%?

also, the fact that it's reporting mroe precision than what you are receiving makes me doubt that you are actually using the templates in your output. can you show us your config?

David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to