26 Oct
2007
26 Oct
'07
10:55 a.m.
We have a central syslog server that we would like to record both the timestamp send by the client and the receipt timestamp.
In other words, a keep_timestamp(yes and no) option.
Just use a template, which uses both the macros R_ISODATE and S_ISODATE (or any other, see http://www.balabit.com/dl/html/syslog-ng-admin-guide_en.html/ch08s05.html) and use them in a macro eg: template t_both_timestamps { template("$R_ISODATE $HOST $S_ISODATE $MSG\n"); template_escape(no); }; Regards, Peter HÖLTZL -- BalaBit IT Bizt. Kft | Tel: +36 1 371-0540 | GnuPG Fingerprint: holtzl.peter@balabit.hu | Mobil: +36 20 366-9667 | 2831 E951 B9EE 63BB F0F4 http://www.balabit.hu/ | Fax: +36 1 208-0875 | 2F4A 1EA4 4B12 7638 29C0