KeepKernelTimestamp¶

Keeps the kernel-supplied timestamp prefix in each message when kernel timestamps are parsed.

This parameter applies to imklog: Kernel Log Input Module.

Name:: KeepKernelTimestamp
Scope:: module
Type:: boolean
Default:: off
Required?:: no
Introduced:: at least 5.x, possibly earlier

Description¶

If enabled, this option keeps the [timestamp] provided by the kernel at the beginning of each message rather than to remove it, when it could be parsed and converted into local time for use as regular message time. Only used when ParseKernelTimestamp is on.

Notes¶

Legacy documentation referred to the type as “binary”; it behaves as a boolean value.

Module usage¶

module(load="imklog"
       parseKernelTimestamp="on"
       keepKernelTimestamp="on")

Legacy names (for reference)¶

Historic names/directives for compatibility. Do not use in new configs.

$klogKeepKernelTimestamp — maps to KeepKernelTimestamp (status: legacy)

See also¶

imklog: Kernel Log Input Module

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2025 Rainer Gerhards and others. Licensed under the Apache License 2.0.

nnnn