I would like to configure our rsyslog server to drop the timestamp of the incoming messages and replace them with time from the rsyslog server.
Reason for this is that we have some system that don't have the option to change the time on their logging entrys.
Our rsyslog-server is running with: Red Hat Enterprise Linux Server release 6.3 (Santiago)
For Example the syslog-ng OSE can do something like that: it's called keep_timestamp():
"setting the keep-timestamp() option to no allows syslog-ng OSE to replace the full timestamp (timezone included) with the time the message was received".
That's what i need for my rsyslog server, hope that clarifies what i am looking for.