On 29/05/17 23:18, Björn Persson wrote:
Björn 'besser82' Esser wrote:
> Does this qualify to be a system-wide change? To me this looks like
> a self-contained change, since I don't see any other packages or
> processes in need for adjustment, but rsyslog itself.
I'll be surprised if there aren't any programs that parse the system
log and will need to understand the standard timestamp format. One can
hope that they all understand it already, but the review that's needed
to determine that is in my opinion reason enough to treat it as
system-wide.
One such program which strikes my mind instantly is logwatch ... how
will that cope this change? That said, this change does make a lot of
sense; as long as log parses won't choke and die. And those tools
should be fixed in these cases, don't revert this needed log format change.
--
kind regards,
David Sommerseth