Log files in different timezones

[edric-e]

I'm almost certainly missing something really obvious here. I'm trying to get lnav to read in a couple of types of log files and get them correctly interleaved. One type has timestamps in the local time zone (and no time zone indication); the other has UTC timezones (which are indicated as such). I tried to write a simple piece of SQL to adjust these, something like

;update lnav_file set time_offset=14400000 where format='<my-file-format>'

This sort-of works - but it doesn't update the main display. If I do the same thing using

:adjust-log-time 4h

then the display does update (i.e. re-order the lines correctly). Should the SQL thing work? Is there a better way to do what I'm trying to do here? (I like the SQL approach because I'm writing a shell script wrapper to locate a bunch of log files based on a test run, and I'd like to automate the process of bringing up lnav looking at a bunch of these files and getting them interleaved correctly - I can't see how to automate the :adjust-log-time thing so easily)

[tstack]

What version of lnav are you using?

[edric-e]

lnav -v says: Version: lnav 0.9.0-266-gab671d5-dirty

[tstack]

This sort-of works - but it doesn't update the main display.

What part of it does work? Do you see the time_offset updated when doing a SELECT * FROM lnav_file ?

I tried this on v0.9.0 and the top-of-tree and it seems to work:

[edric-e]

I made a couple of tiny test files like this:
block.1:

Wed May 19 08:00:01 EST 2021 line 1
Wed May 19 08:00:03 EST 2021 line 3

block.2:

Wed May 19 12:00:02 UTC 2021 line 2
Wed May 19 12:00:04 UCT 2021 line 4

When I use ;update lnav_file set time_offset=14400000 where endswith(filepath,'block.1') to update things, the lines are still shown in the order [1, 3, 2, 4], although the display changes to this:

Wed May 19 12:00:01  2021021 lin
Wed May 19 12:00:03  2021021 lin
Wed May 19 12:00:02 UTC 2021 line 2
Wed May 19 12:00:04 UCT 2021 line 4

With :adjust-log-time 4h I get

Wed May 19 12:00:00  2021021 lin
Wed May 19 12:00:02 UTC 2021 line 2
Wed May 19 12:00:02  2021021 lin
Wed May 19 12:00:04 UCT 2021 line 4

[tstack]

Thanks for the details, it is a bug, sorry! I'll get it fixed up by tonight. I'll also see if I can fixup the issue with the rewritten timestamp.

[tstack]

This bug should be fixed in the top-of-tree by the following change:

c3dc668#diff-9b92736a26b412998184d134fd472b6276efecca9cdc126a7a1f754efe29719e

I had tried to optimize something and missed a case. Thanks for the report!

[edric-e]

Lovely, thanks for fixing that so quickly!