what is your config showing?
also, try writing a log with the format RSYSLOG_DebugFormat, it will show you
the contents of all variables.
or you can have your test log write out both the original timestamp and the
converted one (to make sure that you are starting with real data)
On Mon, 5 Jun 2017, William Dauchy wrote:
Date: Mon, 5 Jun 2017 22:29:38 +0200
From: William Dauchy <[email protected]>
To: David Lang <[email protected]>
Cc: William Dauchy via rsyslog <[email protected]>
Subject: Re: [rsyslog] timestamp comparison
On Mon, Jun 5, 2017 at 10:17 PM, David Lang <[email protected]> wrote:
did you mean %timereported% instead of %$!timereported% ?
good catch indeed, but still no result after this modification.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.