On Mon, Jun 5, 2017 at 10:33 PM, David Lang <[email protected]> wrote: > what is your config showing? > also, try writing a log with the format RSYSLOG_DebugFormat, it will show > you the contents of all variables. > or you can have your test log write out both the original timestamp and the > converted one (to make sure that you are starting with real data)
Thanks for your help, in fact my exec_template call was misplaced in my config. I now have a working ($!timestamp_generated - $!timestamp_reported) Best, -- William _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
