Jim, unfortunately there is no way to modify the %t variable... However, I have a few thoughts about your logging scheme. As I understood, you are doing the logging through the 'write' action? If you would like to have %t a different format because you are using 'write' for appending data to the same files that syslogd is modifying, I would strongly recommend to have a separate file for SEC-originated messages. If two applications are simultaneously writing to the same file, there are no guarantees for log data integrity! (For example, a 'write' from SEC could partly overwrite a message that syslogd has just logged). IMHO, if you are using a separate file for SEC messages under /var/log, you can easily have a slightly different timestamp -- and as for the host names, you can extract these with appropriate regular expressions and include in 'write' messages as $<number> variables. hth, risto
Jim Johnson wrote: > Hello, > > I've just started using SEC to find specific messages in a number of > WebSphere logs and send them to /var/log/messages to be picked up and > archived by another centralized logging process. My issue is that I'd > like the WebSphere messages to be outputted with the proper timestamp / > date format that other entries in /var/log/messages already have. > > Current timestamp format for /var/log/messages entries: > > Jul 8 10:19:44 > > Timestamp format using %t in the write action: > > Tue Jul 8 11:43:58 2008 > > Is there a way to modify %t to display like the other entries? Thanks ... > > - Jim > > p.s. - I'd also like to have the hostname added to the write action as > well so that these WebSphere log entries look like any other syslog > entry. Thanks in advance ... > > > ------------------------------------------------------------------------ > > ------------------------------------------------------------------------- > Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! > Studies have shown that voting for your favorite open source project, > along with a healthy diet, reduces your potential for chronic lameness > and boredom. Vote Now at http://www.sourceforge.net/community/cca08 > > > ------------------------------------------------------------------------ > > _______________________________________________ > Simple-evcorr-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users ------------------------------------------------------------------------- Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08 _______________________________________________ Simple-evcorr-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
