On Wed, 17 Jun 2015, Andrew Couzens wrote:
Hello,
I'm looking to preserve the time stamp of a message by rsyslog 5 but am
experiencing a problem.
Here is the message received by rsyslog:
[pid 17587] recvmsg(0, {msg_name(0)=NULL, msg_iov(1)=[{"<134>Jun 17 14:05:57
Here is how it logs it out:
[pid 17585] write(4, "2015-06-17T11:05:57.657288-07:00
Here is my config:
$template FileFormatFromhost,"%TIMESTAMP:::date-rfc3339% ...
$template ForwardFormatFromhost,"<%PRI%>%TIMESTAMP:::date-rfc3339% ...
Any thoughts?
what if you just do %timestamp%?
also, the fact that it's reporting mroe precision than what you are receiving
makes me doubt that you are actually using the templates in your output. can you
show us your config?
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.