# KeepKernelTimestamp

Keeps the kernel-supplied timestamp prefix in each message when kernel timestamps are parsed.

This parameter applies to imklog: Kernel Log Input Module.

Name:

  KeepKernelTimestamp

Scope:

  module

Type:

  boolean

Default:

  off

Required?:

  no

Introduced:

  at least 5.x, possibly earlier

## Description

If enabled, this option keeps the [timestamp] provided by the kernel at the beginning of each message rather than to remove it, when it could be parsed and converted into local time for use as regular message time. Only used when `ParseKernelTimestamp` is on.

## Notes

- Legacy documentation referred to the type as “binary”; it behaves as a boolean value.

## Module usage

    module(load="imklog"
           parseKernelTimestamp="on"
           keepKernelTimestamp="on")

### Legacy names (for reference)

Historic names/directives for compatibility. Do not use in new configs.

- $klogKeepKernelTimestamp — maps to KeepKernelTimestamp (status: legacy)

## See also

imklog: Kernel Log Input Module

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2025 Rainer Gerhards and others. Licensed under the Apache License 2.0.