I am creating a template for syslog messages as per RFC 5424.
I am using *RSYSLOG_SyslogProtocol23Format* as a reference.
The template I came up with is as follows.
"<%PRI%> 1 %TIMESTAMP:::date-rfc3339% %HOSTNAME% %APP-NAME% %PROCID%
%MSGID% %STRUCTURED-DATA% %msg%\n"
As per the RFC 5424 examples, for UTC based timestamp we are supposed to
have 'Z' in the timezone part.
Example 1
1985-04-12T23:20:50.52Z
Example 3
2003-10-11T22:14:15.003Z
But when I use this template, I always get +00:00 instead of Z
2018-06-11T10:54:13.983308+00:00
On browsing the code I see that this can be controlled using the
OffsetMode. But I couldn't find any configuration to set offsetMode.
Is it possible to configure this ? Please let me know if I have
misunderstood the RFC.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
