One of my servers is using ISO datetime formats (2011-02-27T15:22:15.519857-05:00) in the logs the rest use the default redhat/CentOS format (Feb 27 15:10:21). After a couple of hours searching google I cannot find where this is defined. I know I changed it some months ago as an experiment but forgotten where this was done. the ISO format breaks logwatch - thus I need to revert. TIA -------------- next part -------------- A non-text attachment was scrubbed... Name: rkampen.vcf Type: text/x-vcard Size: 322 bytes Desc: not available URL: <http://lists.centos.org/pipermail/centos/attachments/20110227/d31cbf72/attachment.vcf>
> -----Original Message----- > From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On > Behalf Of Rob Kampen > Sent: Sunday, February 27, 2011 3:34 PM > To: CentOS mailing list > Subject: [CentOS] log time formats - where is this defined > > One of my servers is using ISO datetime formats > (2011-02-27T15:22:15.519857-05:00) in the logs > the rest use the default redhat/CentOS format (Feb 27 15:10:21). > After a couple of hours searching google I cannot find where this is > defined. > I know I changed it some months ago as an experiment but forgotten > where this was done.> the ISO format breaks logwatch - thus I need to revert.I had problems with that, here's the fix: Add to first line of /etc/rsyslog.conf: $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat Here's the Bugzilla for this problem: https://bugzilla.redhat.com/show_bug.cgi?id=583621 Al
On Sun, 27 Feb 2011 15:33:57 -0500 Rob Kampen <rkampen at kampensonline.com> wrote:> One of my servers is using ISO datetime formats > (2011-02-27T15:22:15.519857-05:00) in the logs > the rest use the default redhat/CentOS format (Feb 27 15:10:21). > After a couple of hours searching google I cannot find where this is > defined. > I know I changed it some months ago as an experiment but forgotten > where this was done. > the ISO format breaks logwatch - thus I need to revert.Have you changed that box to use rsyslog instead of the default syslog? If so, there's a post on HowToForge with some info on how to put it back into traditional format: http://www.howtoforge.com/forums/showthread.php?t=49642 More detail is in "man rsyslog.conf" in the TEMPLATES section. -- Spiro Harvey Knossos Networks Ltd (04) 460-2531 : (021) 295-1923 www.knossos.net.nz -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 197 bytes Desc: not available URL: <http://lists.centos.org/pipermail/centos/attachments/20110228/90494b44/attachment.sig>