13 Jul
2010
13 Jul
'10
10:28 a.m.
On 07/12/2010 08:08 PM, Patrick H. wrote:
I'm assuming youre not using any custom template to rewrite the message before its outputted. In which case it will use the time provided by the sending host. If the sending host doesnt provide a microsecond value in the timestamp, microseconds will always be 0s. If you want higher granularity, you either need to configure the sending host to do so, or create a template with the R_ISODATE value (uses received time instead of sent time).
Thank you for your reply. I created a simple template with the R_ISODATE value and that worked perfectly. -- Daniel Maher <dma PLUS syslogng AT witbe DOT net>