2015-11-24 8:32 GMT+01:00 Radu Gheorghe <[email protected]>:
> @Ciprian: note that there's also no timezone info, I believe that's
> the second difference from RFC3339/ISO8601.

Than that's a *totally different* format.

Rainer
>
> Best regards,
> Radu
> --
> Performance Monitoring * Log Analytics * Search Analytics
> Solr & Elasticsearch Support * http://sematext.com/
>
>
> On Tue, Nov 24, 2015 at 9:10 AM, Ciprian Hacman
> <[email protected]> wrote:
>> Hi,
>>
>> I was actually thinking of creating a PR for accepting " " instead of "T"
>> between date and time.
>> @Rainer: Would it be ok?
>>
>> Thanks,
>> Ciprian
>> --
>> Performance Monitoring * Log Analytics * Search Analytics
>> Solr & Elasticsearch Support * http://sematext.com/
>>
>> On Mon, Nov 16, 2015 at 2:13 PM, Radu Gheorghe <[email protected]>
>> wrote:
>>
>>> Hello,
>>>
>>> As far as I know, this isn't a date format that rsyslog (or liblognorm)
>>> understands. Because it's not an RFC-3339 timestamp, nor a traditional
>>> RFC-3164-syslog timestamp.
>>>
>>> So far, we've only hacked our way into parsing this with mmnormalize by
>>> getting the two bits (the date and the time) as strings and "stitching"
>>> them together in a template (adding a "T" in the middle) and the default
>>> timezone to get an RFC-3339 timestamp. Ugly, but we don't have custom date
>>> formats in liblognorm as far as I know. May be a useful feature to add at
>>> some point.
>>>
>>> Alternatively, you may be able to modify the date format used by the
>>> logging application into a "standard" one that rsyslog understands.
>>>
>>> Best regards,
>>> Radu
>>> --
>>> Performance Monitoring * Log Analytics * Search Analytics
>>> Solr & Elasticsearch Support * http://sematext.com/
>>>
>>> On Mon, Nov 16, 2015 at 9:18 AM, Vicks Mortal <[email protected]>
>>> wrote:
>>>
>>> > Hello All
>>> >
>>> > Can Somebody tell me which Date Format is of the Line Below? and whats
>>> the
>>> > syntax/keyword for it in rsyslog
>>> >
>>> > [2015-11-14 17:10:26,589] INFO:shutdown:Shutdown Server! - SIGTERM
>>> >
>>> > Regards
>>> > _______________________________________________
>>> > rsyslog mailing list
>>> > http://lists.adiscon.net/mailman/listinfo/rsyslog
>>> > http://www.rsyslog.com/professional-services/
>>> > What's up with rsyslog? Follow https://twitter.com/rgerhards
>>> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
>>> > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
>>> > DON'T LIKE THAT.
>>> >
>>> _______________________________________________
>>> rsyslog mailing list
>>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>>> http://www.rsyslog.com/professional-services/
>>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
>>> DON'T LIKE THAT.
>>>
>> _______________________________________________
>> rsyslog mailing list
>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>> http://www.rsyslog.com/professional-services/
>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
>> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T 
>> LIKE THAT.
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T 
> LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to