On Thu, 21 Oct 1999, Chris Calabrese wrote:
> 1. Nobody really cares about what the timezone was on the original machine. They
> only care about the timezone they're in when they're reading the logs.
Most admins who manage machines across multiple timezones would disagree.
> 2. Dealing with multiple machines having different timezeones but their logs
> going to the same file is too much of a pain.
Again, from the perspective of an administrator, 5 bytes of timezone
info cab be a great help in a number of ways. For reports it is much
easier than determining the source timezone by looking at the source
hostname (required with existing syslog format). It's also much easier
than doing the same and then factoring the difference bttn UTC. The
main benefit would be that an originating timezone stamp would make the
logs substantially more human readable (a'la sendmail logs).
--
Roger Marquis
Roble Systems Consulting
http://www.roble.com/