Your're right!

Like: "${ISODATE} ${HOST} ${PROGRAM} ${PRIORITY} ${MSG}"

It's seem work. Thanks!!!

Saluti,

Francesco.

2017-05-31 13:57 GMT+02:00 Scheidler, Balázs <balazs.scheidler@balabit.com>:

The timestamp is probably best formatted using $ISODATE.