On Fri, Jan 07, 2011 at 07:52:39AM -0500, Wietse Venema wrote:
> It is useful, as it is the SAME TIME as in the maillog file.
Indeed. It is only ambiguous once a year, when clocks move back an hour
after DST. If you need to troubleshoot mail delivery between 1AM and
2AM localtime late in Autumn, you may need to search a two-hour chunk
of mail log file.
I use syslog-ng with ISODATE timestamps, so the log entries themselves
are not ambiguous:
2011-01-07T13:51:07-05:00 ...
destination mail { file("/path/to/logs/$YEAR/$MONTH/$DAY/$HOUR"
template("$ISODATE $HOST $MSG\n") template_escape(no)
owner("root") group("log") perm(0640)
dir_owner("root") dir_group("log")
dir_perm(02750) create_dirs(yes)); };
--
Viktor.
