RFC3164 must include the timestamp `Nov 12 22:35:48`

[thalesmaoa]

Am I missing something, or is the timestamp missing in L137?

ESPEasy/src/src/Helpers/Networking.cpp

Lines 129 to 140 in 302bc33

	// An RFC3164 compliant message must be formated like : "<PRIO>[TimeStamp ]Hostname TaskName: Message"
	// Using Settings.Name as the Hostname (Hostname must NOT content space)
	{
	String header;
	header += '<';
	header += prio;
	header += '>';
	header += NetworkCreateRFCCompliantHostname(true);
	header += F(" EspEasy: ");
	header.trim();
	header.replace(' ', '_');

I had no problem with syslog until I realised that I needed the standardised format.

ts=2025-11-12T22:52:01.321316056Z level=warn msg="error parsing syslog stream" component_path=/ component_id=loki.source.syslog.local err="expecting a Stamp timestamp [col 3]"
ts=2025-11-12T22:52:07.360512543Z level=warn msg="error parsing syslog stream" component_path=/ component_id=loki.source.syslog.local err="expecting a Stamp timestamp [col 3]"
ts=2025-11-12T22:52:12.721814062Z level=warn msg="error parsing syslog stream" component_path=/ component_id=loki.source.syslog.local err="expecting a Stamp timestamp [col 3]"
ts=2025-11-12T22:52:17.360585911Z level=warn msg="error parsing syslog stream" component_path=/ component_id=loki.source.syslog.local err="expecting a Stamp timestamp [col 3]"
ts=2025-11-12T22:52:17.367005791Z level=warn msg="error parsing syslog stream" component_path=/ component_id=loki.source.syslog.local err="expecting a Stamp timestamp [col 3]"

[TD-er]

In the network rewrite PR I'm working on, I added this to create the syslog prefix:

void SyslogWriter::prepare_prefix()
{
  unsigned int prio = Settings.SyslogFacility * 8;

  if (_loglevel == LOG_LEVEL_ERROR) {
    prio += 3; // syslog error
  }
  else if (_loglevel == LOG_LEVEL_INFO) {
    prio += 5; // syslog notice
  }
  else {
    prio += 7;
  }

  // An RFC3164 compliant message must be formated like:
  //   "<PRIO>[TimeStamp ]Hostname TaskName: Message"

  // See: https://www.rfc-editor.org/rfc/rfc3164

  /*
     The TIMESTAMP field is the local time and is in the format of
     "Mmm dd hh:mm:ss" (without the quote marks) where:

       Mmm is the English language abbreviation for the month of the
       year with the first character in uppercase and the other two
       characters in lowercase.  The following are the only acceptable
       values:

       Jan, Feb, Mar, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov, Dec

       dd is the day of the month.  If the day of the month is less
       than 10, then it MUST be represented as a space and then the
       number.  For example, the 7th day of August would be
       represented as "Aug  7", with two spaces between the "g" and
       the "7".



     Lonvick                      Informational                     [Page 10]

     RFC 3164                The BSD syslog Protocol              August 2001


       hh:mm:ss is the local time.  The hour (hh) is represented in a
       24-hour format.  Valid entries are between 00 and 23,
       inclusive.  The minute (mm) and second (ss) entries are between
       00 and 59 inclusive.

     A single space character MUST follow the TIMESTAMP field.
   */

  // Using Settings.Name as the Hostname (Hostname must NOT contain space)

  String formattedTimestamp;

  if (statusNTPInitialized) {
    // Calculate the local time retroactively from the log timestamps
    struct tm ts;
    uint32_t  unix_time_frac{};
    const uint32_t local_timestamp = node_time.systemMicros_to_Localtime(
      node_time.internalTimestamp_to_systemMicros(_timestamp),
      unix_time_frac);
    breakTime(local_timestamp, ts);

    // A single space character MUST follow the TIMESTAMP field.
    formattedTimestamp = strformat(
      F("%s %2d %02d:%02d:%02d "),
      ESPEasy_time::month_str(ts.tm_mon).c_str(),
      ts.tm_mday,
      ts.tm_hour, ts.tm_min, ts.tm_sec);
  }

  String hostname(ESPEasy::net::NetworkCreateRFCCompliantHostname(true));
  hostname.replace(' ', '_');
  hostname.trim();

  _prefix = strformat(
    F("<%d>%s%s EspEasy: "),
    prio,
    formattedTimestamp.c_str(),
    hostname.c_str());
}

N.B. in the current 'mega' branch you may need to change the ESPEasy::net:: and some function names may have changed.
But I guess you will get the idea.