Dinesh,
Try %TIMESTAMP:::date-utc% ________________________________ From: rsyslog <[email protected]> on behalf of P.R.Dinesh via rsyslog <[email protected]> Sent: Monday, June 11, 2018 12:56 PM To: [email protected] Cc: P.R.Dinesh Subject: [rsyslog] Timestamp as per RFC5424 I am creating a template for syslog messages as per RFC 5424. I am using *RSYSLOG_SyslogProtocol23Format* as a reference. The template I came up with is as follows. "<%PRI%> 1 %TIMESTAMP:::date-rfc3339% %HOSTNAME% %APP-NAME% %PROCID% %MSGID% %STRUCTURED-DATA% %msg%\n" As per the RFC 5424 examples, for UTC based timestamp we are supposed to have 'Z' in the timezone part. Example 1 1985-04-12T23:20:50.52Z Example 3 2003-10-11T22:14:15.003Z But when I use this template, I always get +00:00 instead of Z 2018-06-11T10:54:13.983308+00:00 On browsing the code I see that this can be controlled using the OffsetMode. But I couldn't find any configuration to set offsetMode. Is it possible to configure this ? Please let me know if I have misunderstood the RFC. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog rsyslog Info Page - lists.adiscon.net<http://lists.adiscon.net/mailman/listinfo/rsyslog> lists.adiscon.net Mailing list for rsyslog users. Used for discussion, questions, suggestions and everything else that helps. This is a PUBLIC list that is archived by a myriad of sites. http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
