Re: syslog from perl but no date (svlogd)

["Csillag Tamás" <cstamas@digitus.itk.ppke.hu>]

On 07/15, Charlie Brady wrote:
> 
> On Fri, 16 Jul 2004, Csillag[iso-8859-2] Tamás wrote:
> 
> > The only problem I came across, is a date logging issue.
...
> > user.notice: Jul 15 23:52:52 logger: test
> > 
> > But if I run the following perl script:
> ...
> > The line is the following:
> > mail.info: example.pl[3449]: test
> > 
> > I know that I can add a -t (or -tt) option to svlogd but it will add
> > time information to *all* lines AFAIK.
> > 
> > I do not know if this is a perl bug and syslogd works around the
> > problem, but it works right with it.
> 
> This is a problem with the syslog protocol. As you can see in
> http://www.faqs.org/rfcs/rfc3164.html, the content of syslog messages is
> ill-defined - essentially anything goes. Moreover, the recommended
> TIMESTAMP format is in localtime, which as we've recently discussed here
> is ambiguous.
I read them before posting. (I agree)
> I'd recommend that you use -t or -tt in svlogd, and ignore
> any timestamp which was supplied by the logging client. I guarantee you'll
> be less confused taht way.
Yes but in this case I would like to omit 'Jul 15 23:52:52' part to only have
2004-07-16_22:35:35.00431 at the beginning of each line.

I will look to the code if it can be imlemented without messing up the
code.

Do you know what could be a prefered way?

Hmm, maybe some kind of processor can do the hard work for me.
Maybe a perl script? 

I will mail it here if I have a working solution.

-- 
cstamas