Date parsed: 5/11/2001 7:00:49 PM
Date: Fri, 11 May 2001 18:00:49 +0200
Hi Phil,
this is a known problem and caused by NT/W2K (I noticed it for the first
time in NT 3.51 but I'm sure it was already in NT 3.1):
NT/W2K changes the locale of the SYSTEM (which SHOULD always stay the same)
to the locale of the user when the user logs in and reverts back to the
system locale when the user logs off. This poses a problem if the system
locale and the user locale are different.
SL4NT uses the date/time format of the system locale for generating
date/time strings, this exlains while the date/time string format changes in
the log files if a user with a different locale logs in/out.
As I said, this problem is well-known and a solution has been implemented
some versions ago:
On the "Other Settings" property page, you'll find edit fields for date and
time format specifications. As soon as you enter your desired format specs
there, SL4NT will no longer use the format specs of the system locale but
the ones you specify.
For example:
To generate the date and time string in the format "3/16/2001,7:29:57 AM"
you should enter "M'/'d'/'yyyy" in the date format edit field and
"h':'mm':'ss tt" in the time format edit field.
You can find more information about the format spec elements in the SL4NT
documentation.
Franz
"Phill Hardstaff" <phillh@spc.int> wrote in message
news:3afc525f$1@doctorix.spc.int...
> Hi, I am using SL4NT 2.1 on Win2K server, has been running since last
> November , I am logging my Guardain Firewall to it. I have just started to
> write some software to analyse the logs and found that occasionaly SL4NT
> flips the date format to Euro date format from US Date format, anybody
else
> seen this ? or is this my server ? Out of 1.6 million log lines I have
about
> 200,000 reversed ones, the 180,886 below is just the ones that when
flipped
> make an invalid date.
>
> Total # Log events 1628194
> Total # Log errors 180886
>
>
> Example, 4 log lines
>
> 16/03/2001,7:29:45 AM,202.0.156.37,guardian.spc.int,AUTH/SEC,INFO,guardian
> 16/03/2001,7:29:45 AM,202.0.156.37,guardian.spc.int,AUTH/SEC,INFO,guardian
> 3/16/2001,7:29:57 AM,202.0.156.37,guardian.spc.int,AUTH/SEC,INFO,guardian
> 3/16/2001,7:29:57 AM,202.0.156.37,guardian.spc.int,AUTH/SEC,INFO,guardian
>
> Should be 3/16/2001.
>
> --
> Phill Hardstaff
> Senior Support Engineer
> Secretariat of the Pacific Community
> B.P. D5
> Noumea Cedex - 98848
> New Caledonia
>
> Phone +687-260141
> Fax +687-263818
> Email phillh@spc.int
> SPC Web Page http://www.spc.int
> Personal Web Page http://www.hardstaff.com
> Personal Email Phill@Hardstaff.com
> Personal Fax +1 (603) 299-5640
>
>
>
>