Package: syslog-ng Version: 3.1.3-3 Severity: wishlist See also #353744 and #174038 of sysklogd.
A small change to syslog-ng could make logs useful. Could then use as default to solve #353744 and #174038. /etc/syslog-ng/syslog-ng.conf:-- # First, set some global options. options { ... # rfc3339|iso fix bug #353744 ts_format(rfc3339); }; This will the ensure that dates are not ambiguous and mostly monotonic. Can then query large logs efficiently with LC_COLLATE=C look -b. Results can then be filtered, joined, etc. Log analysers should also be fixed to work with ordered dates. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org