Project

General

Profile

Actions

Feature #1469

open

Use ISO 8601 date/time formats

Added by James Moe over 6 years ago. Updated about 1 year ago.

Status:
Assigned
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

suricata (as of 2.0.7) uses a date format that can be confusing. The log files have the US standard form "mm/dd/yyyy". However, when looking at the output of the "-v" option, the date form is "dd/mm/yyyy", a European preference, using slashes instead of dots. The ambiguity becomes obvious only when the day of month exceeds 12.

The feature request is an option in <suricata.yaml> to select a date format between its current form and an ISO 8601 form; my preference is "2015-05-13T09:00:24".

Reference: <https://en.wikipedia.org/wiki/ISO_8601>


Related issues

Related to Optimization #1718: Time stamp in Log files should be ISO 8601 formatNewCommunity TicketActions
Actions #1

Updated by Andreas Herz over 5 years ago

  • Assignee set to OISF Dev
  • Target version set to TBD
Actions #2

Updated by Victor Julien over 3 years ago

  • Status changed from New to Assigned
  • Assignee changed from OISF Dev to Richard Sailer
  • Target version changed from TBD to 70

I think it would be good to add support for the ISO form in console logging as well. CreateIsoTimeString() can be used in SCLogMessageGetBuffer() in util-debug. The messages are constructed based on a format string which defaults to SC_LOG_DEF_LOG_FORMAT. I would suggest adding a new format specifier.

Actions #3

Updated by Andreas Herz over 2 years ago

  • Assignee changed from Richard Sailer to OISF Dev
Actions #4

Updated by Andreas Herz over 2 years ago

Actions #5

Updated by Victor Julien about 1 year ago

  • Target version changed from 70 to TBD
Actions

Also available in: Atom PDF