Package: syslog-ng
Version: 3.1.3-3
Severity: wishlist

See also #353744 and #174038 of sysklogd.

A small change to syslog-ng could make logs useful.
Could then use as default to solve #353744 and #174038.

/etc/syslog-ng/syslog-ng.conf:--
# First, set some global options.
options {
          ...
          # rfc3339|iso fix bug #353744
          ts_format(rfc3339);
};

This will the ensure that dates are not ambiguous and mostly monotonic.

Can then query large logs efficiently with LC_COLLATE=C look -b.
Results can then be filtered, joined, etc.

Log analysers should also be fixed to work with ordered dates.



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to