Sets the syslog timestamp field format to RFC-3164 or RFC-3339.
RFC-3164 specifies a timestamp of the format <Month> <date> hh:mm:ss. This is the default.
RFC-3339 specifies a timestamp of the format yyyy-mm-ddThh:mm:ss
Syntax
logging fields timestamp format [rfc-3164 | rfc-3339]
Parameters
None
Examples
The following example changes the timestamp format used in logging to rfc-3339:
hostname (config) # logging fields timestamp format rfc-3339 hostname (config) # show logging Local logging level: notice Override for class mgmt-back: notice Override for class mgmt-front: notice Override for class mail: none Remote syslog default level: notice No remote syslog servers configured. Receive remote messages via UDP: no Receive remote messages via TCP: no Receive remote messages via TLS: no Log file rotation: Log rotation size threshold: 256 megabytes Archived log files to keep: 40 Log format: Timestamp format: rfc-3339 Subsecond timestamp field: disabled Secure channel logs: no
This example shows the output of the show log audit command using the RFC-3339 timestamp format:
hostname (config) # show log audit 2017-05-12T19:19:16 IE-CM4400 cli[31257]: [cli.NOTICE]: AUDIT: user admin: Executing command: show log audit 2017-05-12T19:20:37 IE-CM4400 cli[31257]: [cli.NOTICE]: AUDIT: user admin: Executing command: show logging 2017-05-12T19:21:05 IE-CM4400 cli[31257]: [cli.NOTICE]: AUDIT: user admin: Executing command: logging fields timestamp format rfc-3164 [ . . . ]
The following example shows the timestamp format used in logging after changing the format to rfc-3164:
hostname (config) # logging fields timestamp format rfc-3164 hostname (config) # show log audit May 12 18:59:05 IE-CM4400 mgmtd[4133]: [mgmtd.NOTICE]: AUDIT: (internal) Action ID 1154: status: completed with failure May 12 18:59:05 IE-CM4400 mgmtd[4133]: [mgmtd.NOTICE]: AUDIT: (internal) Action ID 1155: requested by: (system) (session ID 42524) May 12 18:59:05 IE-CM4400 mgmtd[4133]: [mgmtd.NOTICE]: AUDIT: (internal) Action ID 1155: descr: download file [ . . . ]
User role
Admin
Command mode
Config
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Central Management System: Release 8.0.0
Email Security — Server: Release 8.0.0
Network Security: Release 8.0.0