From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.comp.sysutils.supervision.general/519 Path: main.gmane.org!not-for-mail From: Csillag =?iso-8859-2?Q?Tam=E1s?= Newsgroups: gmane.comp.sysutils.supervision.general Subject: Re: syslog from perl but no date (svlogd) Date: Sat, 17 Jul 2004 00:43:52 +0200 Message-ID: <20040716224352.GI7203@digitus> References: <20040715222109.GE7203@digitus> Reply-To: Csillag =?iso-8859-2?Q?Tam=E1s?= NNTP-Posting-Host: deer.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-2 Content-Transfer-Encoding: quoted-printable X-Trace: sea.gmane.org 1090017857 21221 80.91.224.253 (16 Jul 2004 22:44:17 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Fri, 16 Jul 2004 22:44:17 +0000 (UTC) Cc: supervision@list.skarnet.org Original-X-From: supervision-return-757-gcsg-supervision=m.gmane.org@list.skarnet.org Sat Jul 17 00:44:07 2004 Return-path: Original-Received: from antah.skarnet.org ([212.85.147.14]) by deer.gmane.org with smtp (Exim 3.35 #1 (Debian)) id 1BlbR1-0008Qt-00 for ; Sat, 17 Jul 2004 00:44:07 +0200 Original-Received: (qmail 18083 invoked by uid 76); 16 Jul 2004 22:44:25 -0000 Mailing-List: contact supervision-help@list.skarnet.org; run by ezmlm List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Archive: Original-Received: (qmail 18077 invoked from network); 16 Jul 2004 22:44:25 -0000 Original-To: Charlie Brady Content-Disposition: inline In-Reply-To: X-Operating-System: Gnu/Linux X-PPKE-NOSPAM: I promise, I will never let anything happen to you. Nemo. User-Agent: Mutt/1.5.5.1+cvs20040105i X-PPKE-ITK-MailScanner: Found to be clean X-PPKE-ITK-MailScanner-SpamCheck: not spam, SpamAssassin (pont=-11.324, szukseges 5, autolearn=not spam, AWL 3.58, BAYES_00 -4.90, LOCAL_PPKE -10.00) Xref: main.gmane.org gmane.comp.sysutils.supervision.general:519 X-Report-Spam: http://spam.gmane.org/gmane.comp.sysutils.supervision.general:519 On 07/15, Charlie Brady wrote: >=20 > On Fri, 16 Jul 2004, Csillag[iso-8859-2] Tam=E1s wrote: >=20 > > The only problem I came across, is a date logging issue. ... > > user.notice: Jul 15 23:52:52 logger: test > >=20 > > But if I run the following perl script: > ... > > The line is the following: > > mail.info: example.pl[3449]: test > >=20 > > I know that I can add a -t (or -tt) option to svlogd but it will add > > time information to *all* lines AFAIK. > >=20 > > I do not know if this is a perl bug and syslogd works around the > > problem, but it works right with it. >=20 > This is a problem with the syslog protocol. As you can see in > http://www.faqs.org/rfcs/rfc3164.html, the content of syslog messages i= s > ill-defined - essentially anything goes. Moreover, the recommended > TIMESTAMP format is in localtime, which as we've recently discussed her= e > is ambiguous. I read them before posting. (I agree) > I'd recommend that you use -t or -tt in svlogd, and ignore > any timestamp which was supplied by the logging client. I guarantee you= 'll > be less confused taht way. Yes but in this case I would like to omit 'Jul 15 23:52:52' part to only = have 2004-07-16_22:35:35.00431 at the beginning of each line. I will look to the code if it can be imlemented without messing up the code. Do you know what could be a prefered way? Hmm, maybe some kind of processor can do the hard work for me. Maybe a perl script?=20 I will mail it here if I have a working solution. --=20 cstamas