Follow By default the JSON field called "timestamp" containing a UNIX timestamp in milliseconds will be used as the time of the log message.

Me: Sounds reasonable. Unless the JSON object contains another sequence of bytes that looks like a timestamp occurs earlier in the JSON string in which case it will be used instead.

Me: Excuse me what?

So if you are using sumologic you better be careful not to log any timestamps that aren't the current time or sort your JSON fields 🤢

Sign in to participate in the conversation
Mastodon for Tech Folks

This Mastodon instance is for people interested in technology. Discussions aren't limited to technology, because tech folks shouldn't be limited to technology either!