Re: Future timestamps in /var/log/secure

On Fri, 2010-02-26 at 11:29 -0700, Brielle Bruns wrote:

Isn't the timestamps inserted by syslog rather then the reporting program itself?

The syslog message sent to the local unix socket (/dev/log or /dev/syslog) may contain a timestamp, in which case, that timestamp may be used instead of the local time. As the syslog protocol defines that timestamps are localtime, without any specification of what timezone localtime actually is, the TZ environment variable of the application calling syslog() will affect the timestamp placed in the log. William