Hi all

I want to consume the logs into Graylog but I can see that the time format is “%b %d %H:%M:%S ” when it arrives.
When looking in dovecot.conf I see that it should be in the format “%Y-%m-%d %H:%M:%S”.

My logs are sent vi docker (docker-compose.override.yml):
dovecot-mailcow: # or any other
logging:
driver: “syslog”
options:
syslog-address: “tcp+tls://syslog.example.com:514”
syslog-tls-ca-cert: “/etc/ssl/ca.pem”
tag: “dovecot-mailcow”
syslog-format: “rfc5424”

Don’t know if this has something to do with it.

  • lnxgeek replied to this.
  • lnxgeek
    It sould seem that it is related to some extractors, so it isn’t Dovecot related.

    lnxgeek
    It sould seem that it is related to some extractors, so it isn’t Dovecot related.

    Have something to say?

    Join the community by quickly registering to participate in this discussion. We'd like to see you joining our great moo-community!

    No one is typing