Hi Florian, Can you be a bit more specific, please? Sorry, but I don't understand it. Is syslog-ng storing your log in a different format than RFC5424? Regards, Gabor ________________________________ From: syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Florian Goulais <goulais.florian@gmail.com> Sent: Friday, July 19, 2019 11:36 To: syslog-ng@lists.balabit.hu Subject: [syslog-ng] Syslog-ng header & rfc5424 CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe. Hi. I'am trying to understand why syslog-ng and an header (timestamp host) to log as the rfc specify another header. Someone can explain me the reason plz ? Regards Florian