you can always cut the values out of the times yourself:
template(name="iptables-index"
type="list") {
constant(value="iptables-")
property(name="timereported" dateFormat="rfc3339" position.from="1"
position.to="4")
property(name="timereported" dateFormat="rfc3339" position.from="6"
position.to="7")
property(name="timereported" dateFormat="rfc3339" position.from="9"
position.to="10")
}
On Wed, Nov 28, 2018 at 9:51 AM John Chivian <[email protected]> wrote:
> Hello Experts.
>
> I was very surprised to find the property $now is only YYYY-MM-DD,
> and was not subject to the dateFormat="rfc3339" specifier.
>
> I was also surprised to find there doesn't appear to be a $second or
> $microsecond property similar to the $year, $month, $day, $hour, and
> $minute properties listed in the documentation.
>
> What I want to do is put together an RFC3339 representation of $now,
> and I specifically do not want $timegenerated or $timereported.
>
> Have I missed something fundamental? Thanks in advance for any help!
>
> Regards, John
>
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
