linux-wizard/timegrep — Issue #1: make syslog date match less stringent
Author: ssbertilson
Created: 2012-03-09 23:10:48+00:00
State: open

My issue is that it didn't like syslog lines that use a timestamp like:
Mar 9 16:50:47
Suggest modifying the syslog match to:
{'regexp':"(?P[a-zA-Z]{3}) *(?P[0-9]{1,2})
Allow a blank instead of leading 0 in day of the month and day of month to be 1 or 2 digits, then 0 fill:
d_day = match_array['DAY']
if len(d_day) < 2:
d_day = `0` + d_day

Hope this seems reasonable.

Thanks for continuing the work on this, especially the multiple date format matching!