Getting milliseconds in logs
Hi, I want to get a complete ISO8601 timestamp format in syslog-ng. Something like: 2013-04-04T18:44:34.694692+00:00 When I enable, ts_format("iso"), I'm not able to get milliseconds precision and what I get is something like 2013-04-05T02:57:07+00:00 For some reason, I really need milliseconds resolution. How can I achieve that in syslogn-ng? -- Regards, Abhijeet Rastogi (shadyabhi) http://blog.abhijeetr.com
I've even even tried using custom template like: template t_both_timestamps { template("$R_ISODATE $HOST $S_ISODATE $MSG\n"); template_escape(no); }; It still gave me a timestamp like 2013-04-05T03:14:27+00:00. What is it that I'm doing wrong? On Fri, Apr 5, 2013 at 3:02 AM, Abhijeet Rastogi <abhijeet.1989@gmail.com>wrote:
Hi,
I want to get a complete ISO8601 timestamp format in syslog-ng. Something like: 2013-04-04T18:44:34.694692+00:00
When I enable, ts_format("iso"), I'm not able to get milliseconds precision and what I get is something like 2013-04-05T02:57:07+00:00
For some reason, I really need milliseconds resolution. How can I achieve that in syslogn-ng?
-- Regards, Abhijeet Rastogi (shadyabhi) http://blog.abhijeetr.com
-- Regards, Abhijeet Rastogi (shadyabhi) http://blog.abhijeetr.com
You should be able to use the frac_digits(3); global option (or on a destination). Evan. On 04/04/2013 02:46 PM, Abhijeet Rastogi wrote:
I've even even tried using custom template like:
template t_both_timestamps { template("$R_ISODATE $HOST $S_ISODATE $MSG\n"); template_escape(no); };
It still gave me a timestamp like 2013-04-05T03:14:27+00:00.
What is it that I'm doing wrong?
On Fri, Apr 5, 2013 at 3:02 AM, Abhijeet Rastogi <abhijeet.1989@gmail.com <mailto:abhijeet.1989@gmail.com>> wrote:
Hi,
I want to get a complete ISO8601 timestamp format in syslog-ng. Something like: 2013-04-04T18:44:34.694692+00:00
When I enable, ts_format("iso"), I'm not able to get milliseconds precision and what I get is something like 2013-04-05T02:57:07+00:00
For some reason, I really need milliseconds resolution. How can I achieve that in syslogn-ng?
-- Regards, Abhijeet Rastogi (shadyabhi) http://blog.abhijeetr.com
-- Regards, Abhijeet Rastogi (shadyabhi) http://blog.abhijeetr.com
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- Evan Rempel erempel@uvic.ca Senior Systems Administrator 250.721.7691 Data Centre Services, University Systems, University of Victoria
That was quick. That did it. I feel foolish now. Thanks a lot Evan On Fri, Apr 5, 2013 at 3:26 AM, Evan Rempel <erempel@uvic.ca> wrote:
You should be able to use the frac_digits(3); global option (or on a destination).
Evan.
On 04/04/2013 02:46 PM, Abhijeet Rastogi wrote:
I've even even tried using custom template like:
template t_both_timestamps { template("$R_ISODATE $HOST $S_ISODATE $MSG\n"); template_escape(no); };
It still gave me a timestamp like 2013-04-05T03:14:27+00:00.
What is it that I'm doing wrong?
On Fri, Apr 5, 2013 at 3:02 AM, Abhijeet Rastogi < abhijeet.1989@gmail.com <mailto:abhijeet.1989@gmail.com>> wrote:
Hi,
I want to get a complete ISO8601 timestamp format in syslog-ng. Something like: 2013-04-04T18:44:34.694692+00:00
When I enable, ts_format("iso"), I'm not able to get milliseconds precision and what I get is something like 2013-04-05T02:57:07+00:00
For some reason, I really need milliseconds resolution. How can I achieve that in syslogn-ng?
-- Regards, Abhijeet Rastogi (shadyabhi) http://blog.abhijeetr.com
-- Regards, Abhijeet Rastogi (shadyabhi) http://blog.abhijeetr.com
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- Evan Rempel erempel@uvic.ca Senior Systems Administrator 250.721.7691 Data Centre Services, University Systems, University of Victoria
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- Regards, Abhijeet Rastogi (shadyabhi) http://blog.abhijeetr.com
Hi, I have added the frac-digits option to the list of global options (it was missing), and also added a link to frac-digits from the description of the ts_format option. I'll put it online on Monday at the latest. Regards, Robert On 04/04/2013 11:59 PM, Abhijeet Rastogi wrote:
That was quick. That did it. I feel foolish now. Thanks a lot Evan
On Fri, Apr 5, 2013 at 3:26 AM, Evan Rempel <erempel@uvic.ca <mailto:erempel@uvic.ca>> wrote:
You should be able to use the frac_digits(3); global option (or on a destination).
Evan.
On 04/04/2013 02:46 PM, Abhijeet Rastogi wrote: > I've even even tried using custom template like: > > template t_both_timestamps { > template("$R_ISODATE $HOST $S_ISODATE $MSG\n"); template_escape(no); > }; > > It still gave me a timestamp like 2013-04-05T03:14:27+00:00. > > > What is it that I'm doing wrong? > > > On Fri, Apr 5, 2013 at 3:02 AM, Abhijeet Rastogi <abhijeet.1989@gmail.com <mailto:abhijeet.1989@gmail.com> <mailto:abhijeet.1989@gmail.com <mailto:abhijeet.1989@gmail.com>>> wrote: > > Hi, > > I want to get a complete ISO8601 timestamp format in syslog-ng. Something like: 2013-04-04T18:44:34.694692+00:00 > > When I enable, ts_format("iso"), I'm not able to get milliseconds precision and what I get is something like 2013-04-05T02:57:07+00:00 > > For some reason, I really need milliseconds resolution. How can I achieve that in syslogn-ng? > > -- > Regards, > Abhijeet Rastogi (shadyabhi) > http://blog.abhijeetr.com > > > > > -- > Regards, > Abhijeet Rastogi (shadyabhi) > http://blog.abhijeetr.com > > > ______________________________________________________________________________ > Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng > Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng > FAQ: http://www.balabit.com/wiki/syslog-ng-faq >
-- Evan Rempel erempel@uvic.ca <mailto:erempel@uvic.ca> Senior Systems Administrator 250.721.7691 <tel:250.721.7691> Data Centre Services, University Systems, University of Victoria ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- Regards, Abhijeet Rastogi (shadyabhi) http://blog.abhijeetr.com
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
participants (3)
-
Abhijeet Rastogi
-
Evan Rempel
-
Fekete Robert