Hello,

I am having trouble using the timestamp formatter.

The document says I can use ts_format() as rfc3164, bsd, rfc3339, or iso.

I’ve tried multiple values and have gotten the same result.

I’ve tried putting the ts_format(rfc3339) in the global options and in the destination’s syslog() and have gotten the same result.

My test logs show the following no matter what ts_format I set:

<113>1 2014-11-25T11:00:00+00:00 10.1.1.1 RedBox -

I want it to look like the following:

<113>1 2014-11-25T11:00:00.000Z 10.1.1.1 RedBox –

Am I missing something?

Thanks,

Jimmy Ou