muting timestamp ?

[amiracam]

Hi, first of all , thanks for this utility

Syslog viewers like kiwi already timestamp their record display and therefore currently at least the way I'm constructing the message a timestamp displays in the message column for Kiwi i.e. appended to my msg text. Is there a way of turning this off ? I tried passing null i.e. withTimestamp but that did not work.

thanks

[cyrille-leclerc]

@amiracam thank you for using the syslog-java-client.
My understanding of the RFC3164 is that the timestamp is a required header (see RFC 3164 > 4.1.2 HEADER Part of a syslog Packet below) and thus we cannot omit it.

Can you share with us docs indicating how to do what you need in a standard manner?

Can you please verify that you are not facing the bug "RFC 3164 dates with single digit day should pad with " " instead of "0" #37 "?

My understanding of [Kiwi Syslog] is that it is consuming the standard Syslog headers including the standard timestamp header.
https://www.solarwinds.com/kiwi-syslog-server

RFC 3164 > 4.1.2 HEADER Part of a syslog Packet

The HEADER part contains a timestamp and an indication of the
   hostname or IP address of the device.  The HEADER part of the syslog
   packet MUST contain visible (printing) characters.  The code set used
   MUST also be seven-bit ASCII in an eight-bit field like that used in
   the PRI part.  In this code set, the only allowable characters are
   the ABNF VCHAR values (%d33-126) and spaces (SP value %d32).

   The HEADER contains two fields called the TIMESTAMP and the HOSTNAME.
   The TIMESTAMP will immediately follow the trailing ">" from the PRI
   part and single space characters MUST follow each of the TIMESTAMP
   and HOSTNAME fields.  HOSTNAME will contain the hostname, as it knows
   itself.  If it does not have a hostname, then it will contain its own
   IP address.  If a device has multiple IP addresses, it has usually
   been seen to use the IP address from which the message is
   transmitted.  An alternative to this behavior has also been seen.  In
   that case, a device may be configured to send all messages using a
   single source IP address regardless of the interface from which the
   message is sent.  This will provide a single consistent HOSTNAME for
   all messages sent from a device.

...

[amiracam]

@cyrille-leclerc , so I'm constructing the message as such:

return new SyslogMessage ()
.withTimestamp (null)
.withSeverity (severity)
.withAppName (appPrefix)
.withHostname (messageHostName ())
.withFacility (Facility.USER)
.withMsg (message),

[amiracam]

Sorry , don't know how to add a carriage return within the GitHub ticket form. The result of the above is that then in Kiwi I get the following outcome:

[amiracam]

I have confirmed that I'm not adding the timestamp by error, the actual msg above is : "Sending Tradeblazer Smtp Service ...." , the "TB:SSS:TEST SMTP" is the messageHostName , passed into via "withHostName(), thanks