<p dir="ltr"><br>
On May 6, 2013 5:53 PM, "Evan Rempel" <<a href="mailto:erempel@uvic.ca">erempel@uvic.ca</a>> wrote:<br>
><br>
> I must be misunderstanding the timezone handling of syslog-ng because I can't<br>
> get it to behave the way I understand the manual to indicate.<br>
><br>
> I have a few hosts that can only syslog in UTS, including the time zone,<br>
> so all time stamps look like "2013-05-06T15:45:06+00:00".<br>
><br>
> Two things happen.<br>
><br>
> 1. The file name destination /var/syslog/archive/syslog.$S_YEAR$S_MONTH$S_DAY.${S_HOUR}0000<br>
> that does not have any timezone specified, and the global option of keep-timestamp is yes.<br>
><br>
> This destination uses the numbers from the UTC time stamp, but the manual indicates in section<br>
> "2.5. Timezones and daylight saving" ... "Step 5. When macro expansions are used in<br>
> the destination filenames, the local timezone is used."<br>
><br>
> The local time zone is "2013-05-06T08:45:06-07:00" so I expect to have the log file of<br>
> /var/syslog/archive/syslog.20130506.080000<br>
> but instead, the log file is<br>
> /var/syslog/archive/syslog.20130506.150000</p>
<p dir="ltr">I'd have to check the code for this. ... I tried but it's difficult to read code on a phone. It seems to do what the docs say, convert the timestamp to the local timezone. But t I haven't tried at this time<br>
</p>
<p dir="ltr">><br>
> 2. If I am logging from many hosts, in many timezones, and am logging to syslog servers<br>
> in different time zones, I would like the logs written in the time zone of the syslog server.<br>
> I realize that there is a time-zone() setting for a destination, but that requires a specific<br>
> time zone and can not handle daylight savings time.</p>
<p dir="ltr">It's been possible since 3.0 to use city names in timezone options.<br></p>
<p dir="ltr">Eg time-zone("Europe/Budapest") should work just fine.<br>
><br>
> Is there a way to configure a destination time zone that follows the localhost daylight savings<br>
> time zone?<br>
><br>
><br>
> Thanks.<br>
><br>
> Evan.<br>
> ______________________________________________________________________________<br>
> Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
> Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
> FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
><br>
</p>