Hi John, https://github.com/rsyslog/rsyslog might be a good starting point.
Regards, Flo On Mon, Dec 3, 2018 at 3:07 PM John Chivian <[email protected]> wrote: > Thanks David, it is much appreciated. Being the original instigator of > the discussion I will see if I can figure out how to make the requested > request. > > Regards, > > > On 12/2/18 3:56 PM, David Lang wrote: > > hmm, can someone put in an enhancement request to make $now be a > > timestamp, but with a default format of just the date (which is odd, > > but needed for backwards compatibility) > > > > with timegenerated and timereported I have never needed to use $now, > > but I could see it being wanted for checking for delays between when > > the message was recevied and when it was processed (if there were > > significant queue delays) > > > > David Lang > > > > On Wed, 28 Nov 2018, Flo Rance via rsyslog wrote: > > > >> Date: Wed, 28 Nov 2018 16:48:17 +0100 > >> From: Flo Rance via rsyslog <[email protected]> > >> To: rsyslog-users <[email protected]> > >> Cc: Flo Rance <[email protected]> > >> Subject: Re: [rsyslog] Now > >> > >> $now is documented here: > >> https://www.rsyslog.com/doc/master/configuration/properties.html > >> > >> It's a date, not a timestamp. It may be a misunderstanding. > >> > >> On Wed, Nov 28, 2018 at 4:31 PM John Chivian <[email protected]> > >> wrote: > >> > >>> > >>>> > >>>> > >>>> On Wed, Nov 28, 2018 at 9:51 AM John Chivian <[email protected]> > >>> wrote: > >>>> > >>>>> Hello Experts. > >>>>> > >>>>> I was very surprised to find the property $now is only > >>>>> YYYY-MM-DD, > >>>>> and was not subject to the dateFormat="rfc3339" specifier. > >>>>> > >>>>> I was also surprised to find there doesn't appear to be a $second or > >>>>> $microsecond property similar to the $year, $month, $day, $hour, and > >>>>> $minute properties listed in the documentation. > >>>>> > >>>>> What I want to do is put together an RFC3339 representation of $now > >>>>> and I specifically do not want $timegenerated or $timereported. > >>>>> > >>>>> Have I missed something fundamental? Thanks in advance for any help! > >>>>> > >>>>> Regards, John > >>>>> > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
