[syslog-ng] Timestamps

[Valdis.Kletnieks at vt.edu]

On Mon, 13 Nov 2006 16:20:41 EST, Jeremy Kindy said:
> Hello all,
> 
> I've set up syslog-ng (1.6.11) on a test server (RHEL4), and am getting 
> some strange timestamps on messages.  Here is a sample, as it appears in 
> the log:
> 
> Nov 10 14:04:54 host1 sshd[29798]: Accepted password for bob from 
> ::ffff:10.40.131.115 port 32799 ssh2
> Nov 10 09:04:54 host1 sshd[29797]: Accepted password for bob from 
> ::ffff:10.40.131.115 port 32799 ssh2
> Nov 10 09:04:54 host1 sshd(pam_unix)[29802]: session opened for user bob 
> by (uid=0)

Looks like some of your boxes are running with the system clock set to
GMT, and some with local time.  Either that, or $TZ isn't being set right.

Are these running in a chroot environment that has a busticated or unreadable
/etc/localtime?


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20061113/dde25ab7/attachment.pgp