<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Apr 25, 2018 at 12:57 PM, Asif Iqbal <span dir="ltr"><<a href="mailto:vadud3@gmail.com" target="_blank">vadud3@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote"><span class="">On Wed, Apr 25, 2018 at 12:49 PM, Asif Iqbal <span dir="ltr"><<a href="mailto:vadud3@gmail.com" target="_blank">vadud3@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">How do I change the time in the log to append a timezone. Timestamp should be based on generateTime=1523620861 which is in the log<div><br></div><div>So today the time in the shows like this </div><div><br></div><div> Apr 25 16:46:51 <a href="http://host.example.net" target="_blank">host.example.net</a> .., generateTime=1524674663, ...</div><div><br></div><div>I like to change it like below</div><div><br></div><div> 2018-04-25T16:46:55+0000 <a href="http://host.example.net" target="_blank">host.example.net</a> ...,generateTime=1524674663, ....</div><div><br></div><div><br><div> <br></div></div></div></blockquote><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div><div></div><div><br></div><div><br clear="all"><div>{"PROGRAM":"alarmLog,","PRIORI<wbr>TY":"notice","MESSAGE":"applia<wbr>nceName=KING-MER-50-PRI, tenantName=king, alarmType=vrrp-v3-proto-error, alarmKey=0|vni-0/3.0, generateTime=1523620861, applianceId=1, vsnId=0, tenantId=4, alarmCause=causeOther, alarmClearable=no, alarmClass=new, alarmKind=root, alarmEventType=equipmentAlarm, alarmSeverity=indeterminate, alarmOwner=tenant, alarmSeqNo=36657, alarmText=\"vni-0/3.0\", siteName=","HOST":"<a href="http://host.example.net" target="_blank">host.exampl<wbr>e.net</a>","FACILITY":"user","<wbr>DATE":"Apr 13 04:01:22"}</div></div></div></div></blockquote><div><br></div><div><br></div></span><div>That was the output of </div><div><br></div><div> filter f_alarm { facility(user) and match("alarmLog" value("PROGRAM")); };<br></div><div> </div><div> destination d_alarm { file ("/var/log/alarms.log" template("$(format-json -s syslog-proto)\n")); };</div><span class=""><div><br></div></span></div></div></div></blockquote><div><br></div><div><br></div><div><br></div><div>I am using syslog-ng version 3.5.6, latest from centos 7</div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><span class=""><div></div><div><br></div><div><br></div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div><div><div><span class="m_4573112480690346463gmail-HOEnZb"><font color="#888888"><br></font></span></div><span class="m_4573112480690346463gmail-HOEnZb"><font color="#888888">-- <br><div class="m_4573112480690346463gmail-m_784230856908024594gmail_signature">Asif Iqbal<br>PGP Key: 0xE62693C5 KeyServer: <a href="http://pgp.mit.edu" target="_blank">pgp.mit.edu</a><br>A: Because it messes up the order in which people normally read text.<br>Q: Why is top-posting such a bad thing?<br><br></div>
</font></span></div></div></div>
</blockquote></span></div><span class=""><br><br clear="all"><div><br></div>-- <br><div class="m_4573112480690346463gmail_signature">Asif Iqbal<br>PGP Key: 0xE62693C5 KeyServer: <a href="http://pgp.mit.edu" target="_blank">pgp.mit.edu</a><br>A: Because it messes up the order in which people normally read text.<br>Q: Why is top-posting such a bad thing?<br><br></div>
</span></div></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature">Asif Iqbal<br>PGP Key: 0xE62693C5 KeyServer: <a href="http://pgp.mit.edu" target="_blank">pgp.mit.edu</a><br>A: Because it messes up the order in which people normally read text.<br>Q: Why is top-posting such a bad thing?<br><br></div>
</div></div>