> -----Original Message----- > From: Chris Lonvick [mailto:[email protected]] > Sent: Thursday, November 11, 2010 5:19 PM > To: Simon Josefsson > Cc: Rainer Gerhards; [email protected] > Subject: Re: [Syslog] Small draft for Syslog File Storage? > > Hi Simon, > > On Wed, 10 Nov 2010, Simon Josefsson wrote: > > Oh, and please use a timestamp format that embeds the year! How > about > > the RFC 3339 format? I hate how it is impossible to know what year a > > log entry was written on modern Linux systems. > > Take a look at RFC 5424. The timestamp is from RFC 3339.
Sorry for the silence today. I am currently working very hard on very complex code for log normalization. But one thing quickly: the timestamp is a typical example of how the real world is hesitant to change. Rsyslog has become the default syslogd on almost all modern linux distros. Rsyslog emits RFC3339 stamps be default, and also uses them by default inside log files. But *all* distros have configured it to use the old-style timestamp... Rainer _______________________________________________ Syslog mailing list [email protected] https://www.ietf.org/mailman/listinfo/syslog
