detect.YearAfterTimestamp

Treat a year following the timestamp as part of the timestamp instead of the hostname.

This parameter applies to pmrfc3164: Parse RFC3164-formatted messages.

Name:

detect.YearAfterTimestamp

Scope:

module

Type:

boolean

Default:

module=off

Required?:

no

Introduced:

at least 8.x, possibly earlier

Description

Some devices append the year directly after the timestamp, which would otherwise be parsed as the hostname. When enabled, years between 2000 and 2099 are treated as part of the timestamp.

Module usage

parser(name="custom.rfc3164" type="pmrfc3164" detect.YearAfterTimestamp="on")

Notes

• Legacy docs referred to this as a binary option, which maps to a boolean.

See also

See also pmrfc3164: Parse RFC3164-formatted messages.

---

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2026 Rainer Gerhards and others. Licensed under the Apache License 2.0.