Thanks for the thorough explanation but I'm afraid that I still don't understand why I'm seeing this:
http://imagebin.ca/view/2EknmP0.html This is how the columns are populated: sent <- %timereported:::date-mysql% sent_subseconds <- %timereported:::date-subseconds% received_by_rsyslog <- %timegenerated:::date-mysql% received_subseconds <- %timegenerated:::date-subseconds% Most probably I didn't get the difference between timereported and timegenerated. Meaning that I should just switch the sent* and received* columns and that nothing is wrong with Rsyslog. I'd be great if you could could confirm this scenario, thanks for your time! Regards, Luigi _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
