[syslog-ng] timestamps

[HÖLTZL Péter]

> We have a central syslog server that we would like to record both the
> timestamp send by the client and the receipt timestamp.
> 
> In other words, a keep_timestamp(yes and no) option.

Just use a template, which uses both the macros R_ISODATE and S_ISODATE
(or any other, see
http://www.balabit.com/dl/html/syslog-ng-admin-guide_en.html/ch08s05.html)
and use them in a macro eg:

template t_both_timestamps { 
	template("$R_ISODATE $HOST $S_ISODATE $MSG\n"); template_escape(no);
};

Regards,

Peter HÖLTZL 

-- 
BalaBit IT Bizt. Kft    | Tel:   +36  1 371-0540 | GnuPG Fingerprint:
holtzl.peter at balabit.hu | Mobil: +36 20 366-9667 | 2831 E951 B9EE 63BB F0F4
http://www.balabit.hu/  | Fax:   +36  1 208-0875 | 2F4A 1EA4 4B12 7638 29C0