garabik/grc

Support for RFC 5424 time format in syslog messages

mbiebl opened this issue · 1 comments

RFC 5424 [1], which is based on RFC 3339 [2], defines a new time stamp format for syslog messages and is the default in rsyslog [3]
The benefits of this timestamp format are:

  • sub-second precision
  • contains timezone information
  • is sortable
  • contains the full date, including the year

A log message looks like this:

2021-12-19T20:35:40.572463+01:00 pluto rtkit-daemon[582]: Supervising 9 threads of 5 processes of 1 users.

syslog messages like this are not properly colorized by grc. It would be great if support for RFC 5424 timestamps could be added to grc.

[1] https://datatracker.ietf.org/doc/html/rfc5424
[2] https://datatracker.ietf.org/doc/html/rfc3339
[3] https://www.rsyslog.com/doc/v8-stable/compatibility/v3compatibility.html#output-file-format

any news here?