You can set a template with twice values... property(name="timereported") property(name="timegenerated")
El 24/10/18 a las 14:31, Peter Viskup via rsyslog escribió: > Interested in monitoring delay of message retrieval in syslog infrastructure. > We have syslog infrastructure with more rsyslog relays in chain and > would like to monitor the diff in times between timegenerated and > timereported. > Requirement is to be alerted when the messages will be delayed > reaching defined threshold. > What would be the best way to implement this? > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
