[syslog-ng] [Bug 229] json parser does not maintain all json object data

bugzilla at bugzilla.balabit.com bugzilla at bugzilla.balabit.com
Fri Mar 29 20:17:49 CET 2013


https://bugzilla.balabit.com/show_bug.cgi?id=229





--- Comment #1 from Balazs Scheidler <bazsi at balabit.hu>  2013-03-29 20:17:48 ---
time related macros are derived from the timestamp of the message and not actually stored there as properties.

thus these macros cannot be set directly, rather the timestamp needs to be set.

each message has two timestamps: the one declared in the message (S_ prefix) and the reception time.

the reception time is assigned by syslog-ng when the syslog-ng receives a message. 

the timestamp is parsed from the message, but defaults to reception time if it is not found.


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.


More information about the syslog-ng mailing list