LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 07-21-2014, 06:19 PM   #1
rnturn
Senior Member
 
Registered: Jan 2003
Location: Illinois (SW Chicago 'burbs)
Distribution: openSUSE, Raspbian, Slackware. Previous: MacOS, Red Hat, Coherent, Consensys SVR4.2, Tru64, Solaris
Posts: 2,795

Rep: Reputation: 550Reputation: 550Reputation: 550Reputation: 550Reputation: 550Reputation: 550
Q: Modifying the date/time stamp of messages from syslog "classic"... doable?


I have one old system that doesn't (currently anyway... maybe never because of memory constraints [1]) run a new enough Linux that uses syslog-ng. On my newer systems, I've tweaked the syslog-ng.conf files to generate the timesta in ISO8601 format (yyyy-mm-ddThh:mm:ss). I've looked at every old UNIX text that I can lay my hands on but I can't seem to find any documentation that describes a configuration option that lets one alter the timestamp format for "classic" syslog. Am I outta luck trying to get this old box to join the other systems and have a consistent log file appearance? (Sorry but I absolutely hate the three-letter months that are used by default.)

Q: Was this even possible back then?

I'm guessing I could track down the source code for the old syslogd and see if I could modify it to use the ISO format (could be fun, actually) but that's just another thing to go into the queue and may never get done. (You know how that goes...)

Here's hoping someone out there knows of a trick to beat the old syslogd into submission.

TIA...

--
Rick

[1] -- I've started combing through old CDs to see what is the oldest distribution that I have on-hand that used syslog-ng and that might run on that memory-starved system but I'm not hopeful that I'll find anything lean enough.
 
Old 07-22-2014, 03:29 PM   #2
jpollard
Senior Member
 
Registered: Dec 2012
Location: Washington DC area
Distribution: Fedora, CentOS, Slackware
Posts: 4,912

Rep: Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513
You might find it easier to copy syslog-ng source and rebuild it on that system rather than futz with the old code, at least as a first attempt.
 
Old 07-22-2014, 04:15 PM   #3
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Send syslog to a remote syslog server that's capable of doing what you want?..
 
Old 07-22-2014, 04:21 PM   #4
szboardstretcher
Senior Member
 
Registered: Aug 2006
Location: Detroit, MI
Distribution: GNU/Linux systemd
Posts: 4,278

Rep: Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694Reputation: 1694
Leave the systems alone,.. just send everything to a remote logstash instance, then rewrite the timestamp and store all your syslogs in elasticsearch.

http://logstash.net/docs/1.4.2/tutor...e-walkthrough/

http://www.elasticsearch.org/overview/kibana/
 
1 members found this post helpful.
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
"How to rename files with current date stamp appended into name using shell script?" nandi Linux - Newbie 4 10-05-2011 10:36 AM
samba - windows files lose "created on" date stamp when moved to samba share on linux jaredk51 Linux - Software 5 02-19-2010 03:13 PM
What version of syslog generates "last message received x times" messages? invalid entry Red Hat 2 11-18-2009 08:39 AM
"Call Trace" messages, change syslog level? robe Linux - General 0 06-08-2004 10:05 AM
"adjust date & time" in KDE on slack 9.1 causes crash mep]-[isto Slackware 13 02-08-2004 10:07 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 06:22 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration