Problem with Date [SOLVED]

Forensics
Posts: 1
Joined: 06 Sep 2013, 11:52

Problem with Date [SOLVED]

Postby Forensics » 06 Sep 2013, 11:56

Hi there,

I am using Retrospective to analyze old syslog and kernel files from 2012. The Date recognition MMM dd HH:mm:ss does not work for Feb 29 HH:mm:ss. Is there any work arround to this problem. Furthermore the date always shows 2013. Any way to change to 2012?

Best regards
urs.minder
centeractive people
Posts: 68
Joined: 06 Jun 2012, 16:45
Contact:

Re: Problem with Date

Postby urs.minder » 28 Sep 2013, 08:06

If the date recognition (especially the MMM) doesn't work as expected, it could be an issue with the locale settings of the data source. Please open the profile manager, select the data source and open the configuration dialog by activating the corresponding button. In the "Date/Time Recognition" page (step 2), you can change the locale within the pattern recognition box. If it doesn't work, please send a sample log file to the Retrospective support team at support@centeractive.com and provide detailed information about what version of Retrospective you're using.

It's obviously misleading that Retrospective displays the current year if no year is contained in the log entry. I'll create a new issue in the Retrospective bug tracking system to have this problem solved by our development team.
urs.minder
centeractive people
Posts: 68
Joined: 06 Jun 2012, 16:45
Contact:

Re: Problem with Date

Postby urs.minder » 06 Feb 2016, 16:55

The problem has been solved in Retrospective version 3.6.0. When finding log entries with a time but without a date (or year, month, etc.), the following strategy is applied.

  • The file's modification time is used to find out about the missing parts.
  • A message is shown to the user if such deduction happens.

Return to “General Retrospective Topics”

Who is online

Users browsing this forum: No registered users and 1 guest