Mailing List Archive: Doubt in syslog.

Doubt in syslog.

Feb 18, 2008, 7:10 AM

Post #1 of 4 (1023 views)

Hi,

I have a doubt about a syslog file.

In our system, all the client syslogs are forwarded to single
syslog server.

The timestamp found in syslog in syslog server is whether a
client timestamp or the server timestamp.....?

Can u please answer this question...?

Thanks,

Santhosh Kumar.K.S.

============================================================================================================================

Disclaimer:

This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review the policy at <a href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahindra.com/Disclaimer.html</a> externally and <a href="http://tim.techmahindra.com/Disclaimer.html">http://tim.techmahindra.com/Disclaimer.html</a> internally within Tech Mahindra.

============================================================================================================================

Doubt in syslog. [ In reply to ]

rgerhards at hq

Feb 18, 2008, 7:33 AM

Post #2 of 4 (1017 views)

Permalink

There are actually two timestamps. "timereported" is taken from the
message, but it requires that the sender included a timestamp (not all
do). "timegenerated" is the time the message was received. The default
templates use "timereported", as far as I remember. If it's important
and you are in doubt, simply define your own template, so you know what
you use ;)

Properties are described here:

http://www.rsyslog.com/doc-property_replacer.html

The rest is in the config guide (links at the bottom).

Rainer

> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> bounces at lists.adiscon.com] On Behalf Of Santoshkumar K S
> Sent: Monday, February 18, 2008 3:11 PM
> To: rsyslog at lists.adiscon.com
> Subject: [rsyslog] Doubt in syslog.
>
>
> Hi,
>
> I have a doubt about a syslog file.
>
> In our system, all the client syslogs are forwarded to
> single
> syslog server.
>
> The timestamp found in syslog in syslog server is whether a
> client timestamp or the server timestamp.....?
>
> Can u please answer this question...?
>
>
>
> Thanks,
>
> Santhosh Kumar.K.S.
>
>
>
>
=======================================================================
> =====================================================
>
> Disclaimer:
>
> This message and the information contained herein is proprietary and
> confidential and subject to the Tech Mahindra policy statement, you
may
> review the policy at <a
>
href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahin
> dra.com/Disclaimer.html</a> externally and <a
>
href="http://tim.techmahindra.com/Disclaimer.html">http://tim.techmahin
> dra.com/Disclaimer.html</a> internally within Tech Mahindra.
>
>
=======================================================================
> =====================================================
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog

Doubt in syslog. [ In reply to ]

mbiebl at gmail

Feb 18, 2008, 7:38 AM

Post #3 of 4 (1017 views)

Permalink

2008/2/18, Rainer Gerhards <rgerhards at hq.adiscon.com>:
> >
> > Disclaimer:
> >
> > This message and the information contained herein is proprietary and
> > confidential and subject to the Tech Mahindra policy statement, you
> may
> > review the policy at <a

Wow, nice disclaimer.
You are in trouble now, Rainer ;-)

Michael

--
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

Doubt in syslog. [ In reply to ]

rgerhards at hq

Feb 18, 2008, 7:52 AM

Post #4 of 4 (1013 views)

Permalink

Lol... not just me - www.mail-archive.com and a few other of these
folks, too ;) This reminds me that I should add a "post at your own risk
and if you do all your content is owned by us" reminder to the mailing
list ;)

Rainer

> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> bounces at lists.adiscon.com] On Behalf Of Michael Biebl
> Sent: Monday, February 18, 2008 3:39 PM
> To: rsyslog-users
> Subject: Re: [rsyslog] Doubt in syslog.
>
> 2008/2/18, Rainer Gerhards <rgerhards at hq.adiscon.com>:
> > >
> > > Disclaimer:
> > >
> > > This message and the information contained herein is proprietary
> and
> > > confidential and subject to the Tech Mahindra policy statement,
you
> > may
> > > review the policy at <a
>
> Wow, nice disclaimer.
> You are in trouble now, Rainer ;-)
>
> Michael
>
> --
> Why is it that all of the instruments seeking intelligent life in the
> universe are pointed away from Earth?
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog