-High level technical overview of output bucketing for flume (old-gen) ?
I am using flume (old gen) as an extension to an existant syslog system and
would like to use the timestamp of the syslog message as the timestamp of
the flume event.
I guess the timestamp is used for the '*Fine grained escape sequences date
and times*' but I don't have a clear understanding of it.
Could someone point me to where those sequences (like %d) are interpreted?
I would like to be sure I am not missing anything obvious.
Thanks in advance
PS : I know an unrelated recommandation would be to use flume-ng but this
is not the topic of this email.