Jim Johnson wrote: > Hello, > > I've just started using SEC to find specific messages in a number of > WebSphere logs and send them to /var/log/messages to be picked up and > archived by another centralized logging process. My issue is that I'd > like the WebSphere messages to be outputted with the proper timestamp > / date format that other entries in /var/log/messages already have. > > Current timestamp format for /var/log/messages entries: > > Jul 8 10:19:44 > > Timestamp format using %t in the write action: > > Tue Jul 8 11:43:58 2008 > > Is there a way to modify %t to display like the other entries? Thanks ... > > - Jim > > p.s. - I'd also like to have the hostname added to the write action as > well so that these WebSphere log entries look like any other syslog > entry. Thanks in advance ... > If you cannot send logs directly from WebSphere to syslog then I would have a script tail the WebSphere logs and input them into syslog as they are written, they will get the right hostname, time and will slot in nicely in to your logging infrastructure, if your system logger logs to a central server, then the WebSphere logs would end up going through this standardized mechanism as well.
I recently wrote a Bash script to do just this for log files in a generic way. I can provide you with the script if you like... However, if you only want some logs as you seem to imply, then you may want to consider just letting Sec pipe the logs to the logger command which will then input the log into the standard syslog mechanism and your syslog configuration will again handle it from there in a standardized manner, hostname, timestamp, remote logging, the works. Logger rocks. Sec rocks. Sec + logger... =-O -h -- Hari Sekhon ------------------------------------------------------------------------- Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08 _______________________________________________ Simple-evcorr-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
