Hello:

On 11 Dec 2025 at 22:42, Marjorie Roome via Dng wrote:

> ... installed syslog-ng-core ...
> ... in Devuan Daedalus ...
> ... it automatically removes rsyslog.
I very rarely use sysnaptic, just apt update / upgrade.
I expect it will behave in the same manner. (?)

> ... seem to be a drop in replacement ...
> ... at least for local logging. 
That's the only logs I know of and look at every so often to check.
ie: everything under [/var/log].

Q: Noticed any logs missing from your system?
Logs are my go to place to see what is going on.

> ... default log entries are started with the BSD date/time ...
> BSD Date
> Dec 11 15:55:05
> ISO Date
> 2025-12-11T15:55:05+00:00
For some reason my system logs seem to have different formats:

auth.log -> Dec 12 07:15:01
user.log -> Dec 12 06:00:59
boot       -> Fri Dec 12 06:00:58 2025
trim.log  -> Thu, 11 Dec 2025 07:48:33 -0300
(not the complete list)

> ... logging with an ISO date you should include ts-
> format(iso); in the list of global options list in /etc/syslog-
> ng/sylog-ng.conf.
[sylog-ng.conf] would get all logs to the *same* format?

I don't mind the BSD format, shorted and easier to read.

My box is just a WS, timezone and year are of no particular interest
as logs are rotated, zipped and discarded on a standard schedule.
Should I need anything older than the last five, I have my backups.
Fortunately, I have never had to resort to them.

> ... amended default sylog-ng.conf now in part reads:
>
> # First, set some global options.
> options { chain_hostnames(off); flush_lines(0); use_dns(no);
> use_fqdn(no);
>                dns_cache(no); owner("root"); group("adm"); perm(0640);
>                stats_freq(0); bad_hostname("^gconfd$"); 
>                ts-format(iso);
> };

So the stanza for the BSD standard would be this one?
ie: [ts-format(bsd);]

Thanks in advance,

A.