what is your config showing?

also, try writing a log with the format RSYSLOG_DebugFormat, it will show you the contents of all variables.

or you can have your test log write out both the original timestamp and the converted one (to make sure that you are starting with real data)

On Mon, 5 Jun 2017, William Dauchy wrote:

Date: Mon, 5 Jun 2017 22:29:38 +0200
From: William Dauchy <[email protected]>
To: David Lang <[email protected]>
Cc: William Dauchy via rsyslog <[email protected]>
Subject: Re: [rsyslog] timestamp comparison

On Mon, Jun 5, 2017 at 10:17 PM, David Lang <[email protected]> wrote:
did you mean %timereported% instead of %$!timereported% ?

good catch indeed, but still no result after this modification.

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to