Hi, I'd like to ask if it's normal that %timegenerated:::date-subseconds% returns a value lower than %timereported:::date-subseconds%.
Intuitively I'd say it is since this makes sense by taking in consideration the property names. Still, since the documentation says that timegenerated is the timestamp when the message was received I would have expected a value higher than the one returned by timereported. I'm afraid this is a dumb question but this behaviour got me confused, if anyone could shed some light on this I'd be grateful. Thanks. Regards, Luigi _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
