Hi,

From: "Marjorie Roome" ; Sent: Thursday, December 11, 2025 5:42:50 PM:
> Hi,
>
> On Tue, 2025-12-09 at 13:35 +0000, Kevin Chadwick via Dng wrote:
> > I don't know about syslog-ng dev practices but it seems to be a drop
> > in replacement. I used to use it on Gentoo.
> >
> > I should have said syslog-ng-core, otherwise it is huge! Seems to
> > actually work automatically after install.
>
> I installed syslog-ng-core using synaptic in Devuan Daedalus with
> sysvinit and it automatically removes rsyslog.
>
> It does seem to be a drop in replacement for a default rsyslog, at
> least for local logging.
>
> The only issue I noticed is that by default log entries are started
> with the BSD date/time, which in particular doesn't include the year
> or the local timezone offset.
>
> BSD Date
> Dec 11 15:55:05
> ISO Date
> 2025-12-11T15:55:05+00:00
>
> To change to logging with an ISO date you should include
> ts-format(iso); in the list of global options list in
> /etc/syslog-ng/sylog-ng.conf.
>
> so my amended default sylog-ng.conf now in part reads:
>
> # First, set some global options.
> options { chain_hostnames(off); flush_lines(0); use_dns(no); use_fqdn(no);
> dns_cache(no); owner("root"); group("adm"); perm(0640);
> stats_freq(0); bad_hostname("^gconfd$");
> ts-format(iso);
> };
>
> --
> Marjorie

Excellent information, thank you Marjorie!

X.