Project

General

Profile

Actions
Copy link

Optimization #1718

open
JS CT

Time stamp in Log files should be ISO 8601 format

Optimization #1718: Time stamp in Log files should be ISO 8601 format

Added by Joachim Schwender over 10 years ago. Updated 5 days ago.

Status:
Feedback
Priority:
Normal
Assignee:
Community Ticket
Target version:
TBD
Effort:
Difficulty:
Label:

Description

Current date string in suricata is only accepted in the USA. In order to consider international use it is generally a good idea to conform with ISO 8601, EN 28601. Most countries on the planet have adopted this standard. I have created a patch for this, i have tested it and it works. This code is of course under GNU License 2, you are welcome and encouraged to use it in suricata.

Files

iso-time-format.patch (7.4 KB) iso-time-format.patch patch for ISO format time stamps in log files Joachim Schwender, 02/22/2016 02:42 AM

Related issues 1 (1 open — 0 closed)

Related to Suricata - Feature #1469: Use ISO 8601 date/time formatsFeedbackOISF DevActions

AH Updated by Andreas Herz over 10 years ago Actions
Copy link
 #1

  • Assignee set to Joachim Schwender
  • Target version changed from 3.0.1RC1 to 70

This might be something we could add optional with some config option.
Nevertheless patches are welcome but the prefered way is via git pull requests, see:

https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Github_work_flow

AH Updated by Andreas Herz almost 10 years ago Actions
Copy link
 #3

  • Target version changed from 70 to TBD

AH Updated by Andreas Herz over 7 years ago Actions
Copy link
 #4

  • Status changed from New to Assigned

Are you still interested in contributing?

AH Updated by Andreas Herz over 7 years ago Actions
Copy link
 #5

VJ Updated by Victor Julien almost 7 years ago Actions
Copy link
 #6

  • Status changed from Assigned to New
  • Assignee changed from Joachim Schwender to Community Ticket

PA Updated by Philippe Antoine about 1 month ago Actions
Copy link
 #7

  • Status changed from New to Feedback

I think it is the case now

"timestamp": "2025-12-29T03:02:14.507838+0100",

Is it not ?

JM Updated by James Moe 5 days ago Actions
Copy link
 #8

Philippe Antoine wrote in #note-7:

I think it is the case now
"timestamp": "2025-12-29T03:02:14.507838+0100",
Is it not ?

That is not enough information to use it. Is that the format for the YAML conf file? Where is it placed?

JI Updated by Jason Ish 5 days ago Actions
Copy link
 #9

James Moe wrote in #note-8:

Philippe Antoine wrote in #note-7:

I think it is the case now
"timestamp": "2025-12-29T03:02:14.507838+0100",
Is it not ?

That is not enough information to use it. Is that the format for the YAML conf file? Where is it placed?

This is EVE format. It should be enough. The time format on stdout and non-EVE is more Americanized, I believe. Will have to be more specific when talking about the time format. What file specifically.

Actions
Copy link

Also available in: PDF Atom