<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
Hi Matus,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
C_ macros should handle time-zones (at least on a fresh version). I will check it on 3.8 soon.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
Regards,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
Attila</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Matus UHLAR - fantomas <uhlar@fantomas.sk><br>
<b>Sent:</b> Tuesday, February 4, 2020 2:38 PM<br>
<b>To:</b> syslog-ng@lists.balabit.hu <syslog-ng@lists.balabit.hu><br>
<b>Subject:</b> [syslog-ng] UTC in C_ macros?</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.<br>
<br>
<br>
Hello,<br>
<br>
I have tried to RTFS but no success.<br>
are C_ dates in UTC or should they be?<br>
<br>
On 31.01.20 13:34, Matus UHLAR - fantomas wrote:<br>
>I have syslog-ng OSE 3.8 on debian 9 server (soon to be upgraded).<br>
><br>
>when I receive syslog lines using the syslog protocol, I found out that C_*<br>
>macros seem to contain date in UTC format (one hour than our current zone).<br>
><br>
>I have tried to use following template:<br>
><br>
>"${C_DATE} ${R_DATE} HOST ${HOST} FULLHOST ${FULLHOST} HOST_FROM ${HOST_FROM} FULLHOST_FROM ${FULLHOST_FROM} ${MESSAGE}\n"<br>
><br>
>with following result:<br>
><br>
>Jan 31 10:42:06 Jan 31 11:42:07 HOST fantomas FULLHOST fantomas HOST_FROM 195.80.174.185 FULLHOST_FROM 195.80.174.185 Configuration reload request received, reloading configuration;<br>
><br>
><br>
>Is there any reason why C_DATE should be in different time zone than R_DATE?<br>
>timezones are not configured on either of servers, both servers are in CET<br>
>(DST+1)<br>
<br>
<br>
--<br>
Matus UHLAR - fantomas, uhlar@fantomas.sk ; <a href="https://nam05.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.fantomas.sk%2F&data=02%7C01%7CAttila.Szakacs%40oneidentity.com%7C3efb1d3651ee47a184c808d7a9777bff%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637164202984527642&sdata=%2F0rasfGDvvua7Z7Nbgwfj4naS21z6Y6ZaH%2B8%2FztY%2BxQ%3D&reserved=0">
https://nam05.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.fantomas.sk%2F&data=02%7C01%7CAttila.Szakacs%40oneidentity.com%7C3efb1d3651ee47a184c808d7a9777bff%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637164202984527642&sdata=%2F0rasfGDvvua7Z7Nbgwfj4naS21z6Y6ZaH%2B8%2FztY%2BxQ%3D&reserved=0</a><br>
Warning: I wish NOT to receive e-mail advertising to this address.<br>
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.<br>
99 percent of lawyers give the rest a bad name.<br>
______________________________________________________________________________<br>
Member info: <a href="https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.balabit.hu%2Fmailman%2Flistinfo%2Fsyslog-ng&data=02%7C01%7CAttila.Szakacs%40oneidentity.com%7C3efb1d3651ee47a184c808d7a9777bff%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637164202984527642&sdata=8yKSgI7JWIMVHPXz2wf%2Fc2YmT1NEyJ7bxGDKYyu2LBo%3D&reserved=0">
https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.balabit.hu%2Fmailman%2Flistinfo%2Fsyslog-ng&data=02%7C01%7CAttila.Szakacs%40oneidentity.com%7C3efb1d3651ee47a184c808d7a9777bff%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637164202984527642&sdata=8yKSgI7JWIMVHPXz2wf%2Fc2YmT1NEyJ7bxGDKYyu2LBo%3D&reserved=0</a><br>
Documentation: <a href="https://nam05.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fsupport%2Fdocumentation%2F%3Fproduct%3Dsyslog-ng&data=02%7C01%7CAttila.Szakacs%40oneidentity.com%7C3efb1d3651ee47a184c808d7a9777bff%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637164202984527642&sdata=Nq96M%2BWi0PYjji7qkO%2Ft2NilOcdZVccankfdxGFRzQ4%3D&reserved=0">
https://nam05.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fsupport%2Fdocumentation%2F%3Fproduct%3Dsyslog-ng&data=02%7C01%7CAttila.Szakacs%40oneidentity.com%7C3efb1d3651ee47a184c808d7a9777bff%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637164202984527642&sdata=Nq96M%2BWi0PYjji7qkO%2Ft2NilOcdZVccankfdxGFRzQ4%3D&reserved=0</a><br>
FAQ: <a href="https://nam05.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fwiki%2Fsyslog-ng-faq&data=02%7C01%7CAttila.Szakacs%40oneidentity.com%7C3efb1d3651ee47a184c808d7a9777bff%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637164202984527642&sdata=F8m1Bv%2F2SVHYJxt4BRld3XUcsEHHff4H5s9%2FgdHWwuI%3D&reserved=0">
https://nam05.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fwiki%2Fsyslog-ng-faq&data=02%7C01%7CAttila.Szakacs%40oneidentity.com%7C3efb1d3651ee47a184c808d7a9777bff%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637164202984527642&sdata=F8m1Bv%2F2SVHYJxt4BRld3XUcsEHHff4H5s9%2FgdHWwuI%3D&reserved=0</a><br>
<br>
</div>
</span></font></div>
</body>
</html>