Hi, I have raised a rsyslog bug[1] in response to a bug report in Ubuntu[2]. rsyslog in Bookworm used to have kernel timestamps, but since version v8.2312[3] those are not present. The change has been in Unstable since 16.12.2023 (almost 1.5 years).
rsyslog itself provides timestamps with a subsecond resolution, syslog-ng (as shipped in Bookworm) does not provide kernel timestamps in the logs by default. I wonder if there is a value in changing upstream defaults to preserve kernel timestamps in rsyslog. Best Regards, Vladimir. [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1101458 [2] https://code.launchpad.net/~akaxia/ubuntu/+source/rsyslog/+git/rsyslog-1/+merge/482162 [3] https://github.com/rsyslog/rsyslog/issues/5160
