On Sun, 27 Feb 2011 15:33:57 -0500 Rob Kampen rkampen@kampensonline.com wrote:
One of my servers is using ISO datetime formats (2011-02-27T15:22:15.519857-05:00) in the logs the rest use the default redhat/CentOS format (Feb 27 15:10:21). After a couple of hours searching google I cannot find where this is defined. I know I changed it some months ago as an experiment but forgotten where this was done. the ISO format breaks logwatch - thus I need to revert.
Have you changed that box to use rsyslog instead of the default syslog?
If so, there's a post on HowToForge with some info on how to put it back into traditional format:
http://www.howtoforge.com/forums/showthread.php?t=49642
More detail is in "man rsyslog.conf" in the TEMPLATES section.