MonitorWare Knowledge Base

syslon-ng can use S_YEAR,S_MONTH,S_DAY etc to define log file or directory name.
example:
file("/var/log/syslog-ng/$S_YEAR-$S_MONTH-$S_DAY/$HOST/alarm"）

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?

you should look into the property replacer and the dynafile doc. It is along these lines

$template filename "/path/to/%YEAR%/file.log"
*.* ?filename

but syslog-ng can user the time of send host or the time of receive host to name logfile.

it can use S_YEAR, S_MONTH, S_DAY etc or R_YEAR, R_MNTH, R_DAY etc ,

some time, we have many servers, the time have a diffent about 1 or 2 sec.

then you need to extract the timestamps form the respective fields via the property replacer.