timestamps within syslog can come from all sorts of places and it depends on the configuration in each instance as to whether, for example, a server strips the old timestamp and adds it's own, appends it's own, or leaves untouched. there are many different syslog implementations each configured in it's own way.
|