Syslog Timestamp incorrect on some entries on 31.12.

Started by Tursiops, January 04, 2018, 04:09:00 AM

Previous topic - Next topic

Tursiops

Hi,

I stumbled over some syslog entries in our system which were being generated just before midnight on 31.12.2017 and ended up with a timestamp of 31.12.2018 in the NetXMS database. Screenshot below. The timestamp on the left is the NetXMS database one. The one on the right is part of the syslog message generated by the device.

The entries appear to all be in the one minute before midnight, so possibly a bug?

Cheers

Victor Kirhenshtein

Hi,

likely is is because syslog message does not contain year in timestamp, only month and day. Server uses current year when parsing. So most likely those messages was delayed by few seconds, and actual parsing happens after midnight, and server just use current year, which was just changed. Probably we have to add some check for it - like if resulting timestamp is one year in the future and current date is 01.01 then assume previous year.

Best regards,
Victor