The problem is syslog. Solaris still ships with an ancient syslog and that's the original syslog date format. What you need is to replace Solaris syslog with an RFC 5424 compliant syslog like rsyslog or syslog-ng.
For the logs you already have, you're going to have to write a little code to fix the dates. "%F.%T" is the strftime() string you're after. Paul -- This message posted from opensolaris.org _______________________________________________ sysadmin-discuss mailing list [email protected] http://mail.opensolaris.org/mailman/listinfo/sysadmin-discuss
