David VILLAUME

Hello, this are freeswitch(precision milliseconds) logs exported via syslog (precision second). We remap freeswitch timestamp as event the event timestamp (using vector.dev ).

firstly i apologize the precision of my logs are microseconds and not milliseconds. I could add the nanosecond par from now, but would still make unordered messages when logs from...

I may give it a try, adding a counter reset when microsenconds differs from previous, to avoid overlap when the counter reaches yyy9xx and goes to the upper thousand ie...

We bypassed it, thanks.