On 04.02.20 14:41, Attila Szakacs (aszakacs) wrote:
I can observe the same behavior as you, on 3.8. It was fixed in 3.20 with https://github.com/syslog-ng/syslog-ng/commit/f65528392071a65c1962046607e921...
Thank you, now I know it's a bug (not on my side). I will use R_ macros for now (should not cause much troubles, if any)
From: syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Matus UHLAR - fantomas <uhlar@fantomas.sk> Sent: Tuesday, February 4, 2020 2:38 PM To: syslog-ng@lists.balabit.hu <syslog-ng@lists.balabit.hu> Subject: [syslog-ng] UTC in C_ macros?
Hello,
I have tried to RTFS but no success. are C_ dates in UTC or should they be?
On 31.01.20 13:34, Matus UHLAR - fantomas wrote:
I have syslog-ng OSE 3.8 on debian 9 server (soon to be upgraded).
when I receive syslog lines using the syslog protocol, I found out that C_* macros seem to contain date in UTC format (one hour than our current zone).
I have tried to use following template:
"${C_DATE} ${R_DATE} HOST ${HOST} FULLHOST ${FULLHOST} HOST_FROM ${HOST_FROM} FULLHOST_FROM ${FULLHOST_FROM} ${MESSAGE}\n"
with following result:
Jan 31 10:42:06 Jan 31 11:42:07 HOST fantomas FULLHOST fantomas HOST_FROM 195.80.174.185 FULLHOST_FROM 195.80.174.185 Configuration reload request received, reloading configuration;
Is there any reason why C_DATE should be in different time zone than R_DATE? timezones are not configured on either of servers, both servers are in CET (DST+1)
-- Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Despite the cost of living, have you noticed how popular it remains?