Feature #1469
open
Use ISO 8601 date/time formats
Added by James Moe over 9 years ago.
Updated about 4 years ago.
Description
suricata (as of 2.0.7) uses a date format that can be confusing. The log files have the US standard form "mm/dd/yyyy". However, when looking at the output of the "-v" option, the date form is "dd/mm/yyyy", a European preference, using slashes instead of dots. The ambiguity becomes obvious only when the day of month exceeds 12.
The feature request is an option in <suricata.yaml> to select a date format between its current form and an ISO 8601 form; my preference is "2015-05-13T09:00:24".
Reference: <https://en.wikipedia.org/wiki/ISO_8601>
Related issues
1 (1 open — 0 closed)
- Assignee set to OISF Dev
- Target version set to TBD
- Status changed from New to Assigned
- Assignee changed from OISF Dev to Richard Sailer
- Target version changed from TBD to 70
I think it would be good to add support for the ISO form in console logging as well. CreateIsoTimeString() can be used in SCLogMessageGetBuffer() in util-debug. The messages are constructed based on a format string which defaults to SC_LOG_DEF_LOG_FORMAT. I would suggest adding a new format specifier.
- Assignee changed from Richard Sailer to OISF Dev
- Target version changed from 70 to TBD
Also available in: Atom
PDF