Re: [nxlog-ce-users] NXLog snare format replacing the "0" in a two digit date (Day) with extra space - No parsing between 1-9 of each month

2015-06-18 Thread Michael Starks
On 03/06/2015 01:15 PM, Botond Botyanszki wrote: > The first date is the syslog header. As per RFC3164 it should have a > single digit date: > "If the day of the month is less > than 10, then it MUST be represented as a space and then the > number. For example, the 7th day of August would be >

Re: [nxlog-ce-users] NXLog snare format replacing the "0" in a two digit date (Day) with extra space - No parsing between 1-9 of each month

2015-06-18 Thread Michael Starks
On 03/06/2015 01:15 PM, Botond Botyanszki wrote: > Probably many syslog implementations are able to parse it with double > digits but to not break standards compliance you should be only replacing > the second, i.e. the value in snare timestamp field. I just came across this thread and am taking a