[syslog-ng] UTC in C_ macros?

[Matus UHLAR - fantomas]

On 04.02.20 14:41, Attila Szakacs (aszakacs) wrote:
>I can observe the same behavior as you, on 3.8.
>It was fixed in 3.20 with https://github.com/syslog-ng/syslog-ng/commit/f65528392071a65c1962046607e921f373fd8351

Thank you, now I know it's a bug (not on my side).
I will use R_ macros for now (should not cause much troubles, if any)

>From: syslog-ng <syslog-ng-bounces at lists.balabit.hu> on behalf of Matus UHLAR - fantomas <uhlar at fantomas.sk>
>Sent: Tuesday, February 4, 2020 2:38 PM
>To: syslog-ng at lists.balabit.hu <syslog-ng at lists.balabit.hu>
>Subject: [syslog-ng] UTC in C_ macros?

>Hello,
>
>I have tried to RTFS but no success.
>are C_ dates in UTC or should they be?
>
>On 31.01.20 13:34, Matus UHLAR - fantomas wrote:
>>I have syslog-ng OSE 3.8 on debian 9 server (soon to be upgraded).
>>
>>when I receive syslog lines using the syslog protocol, I found out that C_*
>>macros seem to contain date in UTC format (one hour than our current zone).
>>
>>I have tried to use following template:
>>
>>"${C_DATE} ${R_DATE} HOST ${HOST} FULLHOST ${FULLHOST} HOST_FROM ${HOST_FROM} FULLHOST_FROM ${FULLHOST_FROM} ${MESSAGE}\n"
>>
>>with following result:
>>
>>Jan 31 10:42:06 Jan 31 11:42:07 HOST fantomas FULLHOST fantomas HOST_FROM 195.80.174.185 FULLHOST_FROM 195.80.174.185 Configuration reload request received, reloading configuration;
>>
>>
>>Is there any reason why C_DATE should be in different time zone than R_DATE?
>>timezones are not configured on either of servers, both servers are in CET
>>(DST+1)

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Despite the cost of living, have you noticed how popular it remains?