Aug 18 02:16:15 SRC_IP HOST %OrionAlertEngine: "BLA BLA BLA message”

 

I receives this kind of messages quite often. My problem is that it is a perfectly fine header and tag, but the original timestamp is in AM/PM format. How can I force syslog-ng to relay this message with the timestamp from the relaying host(which uses 24 hour format), instead of the sending host?                                      

 

TIA

Gregers