Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Syslog Input Support for additional timestamp formats #21209

Open
tellistone opened this issue Dec 17, 2024 · 0 comments
Open

Syslog Input Support for additional timestamp formats #21209

tellistone opened this issue Dec 17, 2024 · 0 comments

Comments

@tellistone
Copy link

What?

Syslog supports various timestamps, like the well-known and currently supported RFC5424 (1985-04-12T23:20:50.52Z)

However where an unsupported format is hit, for example, BSD Format (RFC3164), it becomes necessary to use a GROK pattern in order to get to the timestamp.

The request is that we add explicit support by the syslog input for this, and other, timestamp formats. This might be managed via an option on the Input itself.

Why?

Customers report this being a pain point. Example: https://github.com/Graylog2/support/issues/149

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant