[Syslog-ng-maintainers] Bug#729575: syslog-ng-core: bogus date for kernel messages

Gergely Nagy algernon at balabit.hu
Thu Nov 21 13:42:08 GMT 2013


Jakub Wilk <jwilk at debian.org> writes:

> * Gergely Nagy <algernon at balabit.hu>, 2013-11-15, 17:05:
>>>syslog-ng has just logged this:
>>>
>>>1961-02-05T20:15:59+01:00 borsuk kernel: usb 1-2: USB disconnect, device number 5
>>>
>>> The timestamp is obviously bogus. My system date is correct, and
>>> non-kernel messages are logged with correct timestamps.
>>>
>>> According to my logs this started happening after the 3.3.9-1 ->
>>> 3.5.1-1 
>>>upgrade.
>>
>>Likely not relevant, but are you using systemd?
>
> Nope, the good old sysvinit.
>
>>Do all kernel messages have bogus dates, or only a few ones?
>
> All of them.

Hm... I have not been able to reproduce it yet... can you change your
template to include ${.linux.timestamp} too, and send me a sample?

-- 
|8]




More information about the Syslog-ng-maintainers mailing list