We pass messages with rsyslog using the rfc3339 time format. It has microseconds, and it has a timestamp. But noticed a few issues:
What would be the best way to proceed?
The best approach (IMO) is to create a new sourcetype that parses the data.
View solution in original post