[syslog-ng] ts_format(iso); frac_digits(6); == 000000+00:00 always ?

[Balazs Scheidler]

On Tue, 2010-07-13 at 11:28 +0200, Daniel Maher wrote:
> On 07/12/2010 08:08 PM, Patrick H. wrote:
> > I'm assuming youre not using any custom template to rewrite the message
> > before its outputted. In which case it will use the time provided by the
> > sending host. If the sending host doesnt provide a microsecond value in
> > the timestamp, microseconds will always be 0s. If you want higher
> > granularity, you either need to configure the sending host to do so, or
> > create a template with the R_ISODATE value (uses received time instead
> > of sent time).
> 
> Thank you for your reply.  I created a simple template with the 
> R_ISODATE value and that worked perfectly.
> 

you can also use the keep_timestamp() option on the source, which when
set to "no" causes syslog-ng to overwrite the timestamp in the received
log message with the current time.

-- 
Bazsi