syslog-ng-3.7.2 has broken timestamps (again)

toralf · Last edited by toralf on Fri Jan 22, 2016 9:13 pm; edited 3 times in total

Damn, now I'm really annoyed that this issue appears again : 2 different time stamps for the same event in 2 different files:

Anon-E-moose · Posted: Sun Nov 22, 2015 9:39 pm Post subject:

syslog-ng does search for patterns.

From my syslog-ng.conf

destination iptables { file("/var/log/firewall" perm(0640)); };
...
filter f_iptables { match("IPTABLES:" value("MESSAGE")); };
...
log { source(src); filter(f_iptables); destination(iptables); };

filter f_messages { level(info..emerg) and not filter (f_iptables) and not filter (f_smartd) and not facility(cron, mail, auth, authpriv); };
_________________
Asus m5a99fx, FX 8320 - nouveau, oss4, rx550 for qemu passthrough
Acer laptop E5-575, i3-7100u - i965, alsa
---both---
5.0.13 zen kernel, profile 17.1 (no-pie & modified) amd64-no-multilib
gcc 8.2.0, eudev, openrc, openbox, palemoon

UberLord · Posted: Mon Nov 23, 2015 5:04 am Post subject:

To me, it looks like the same event at different times, so it's fine? (From a syslog POV).
For BSD at least, the syslog(3) call is made in libc where the date/time part is formatted before sending to the syslog socket.
If we assume that glibc is the same, then changing the logger will have zero effect.
_________________
Use dhcpcd for all your automated network configuration needs
Use dhcpcd-ui (GTK+/Qt) as your System Tray Network tool

toralf · Posted: Mon Nov 23, 2015 1:05 pm Post subject:

toralf · Posted: Fri Jan 22, 2016 9:07 pm Post subject:

3.7.2 - same mess : http://www.zwiebeltoralf.de/pub/syslog-ng-3.7.2-mess.txt
/me needs a good logger which has filter capabilities

Syl20 · Guru Joined: 04 Aug 2005 Posts: 568 Location: France

Rsyslog is a little more rustic, but you can set filters too.