title: How to remove forwarding timestamp? OSE version Syslog-NG
body: <p>Following the <a href="https://stackoverflow.com/q/28833774/3317808">answer</a>,</p>
  
  <p>I have tried making changes in Syslog-NG 3.17 <a href="https://www.syslog-ng.com/technical-documents/doc/syslog-ng-open-source-edition/3.17/administration-guide/tzoffset-c_tzoffset-r_tzoffset-s_tzoffset" rel="nofollow noreferrer">OSE version</a>, with below configuration,</p>
  
  <pre><code>@version: 3.17
  
  @include "scl.conf"
  
  options {
  };
  
  source s_network_to_forward {
          network(
                  flags(no-parse)
                  transport(udp)
                  port(514)
                  keep-timestamp(no)
                  persist-name("somekey")
          );
  };
  
  
  template forward_template {
          template($RAWMSG);
          template_escape(no);
  };
  
  destination forward_to_syslog2{
          network("1.2.3.4" transport(udp)  port(514) template(forward_template));
  };
  
  log {
          source(s_network_to_forward);
          destination(forward_to_syslog2);
  };
  </code></pre>
  
  <hr>
  
  <p>Message to forward: <code>Oct 31 16:44:29.071 UTC: %SYS-3-DUP_TIMER: Same tty2 in linewatch_timers, type 2</code></p>
  
  <p>Above configuration is able to forward the message as shown below(with extra header in bold):</p>
  
  <p><strong>Oct 31 12:44:29 X.X.X.X 5277586:</strong> <code>Oct 31 16:44:29.071 UTC: %SYS-3-DUP_TIMER: Same tty2 in linewatch_timers, type 2</code></p>
  
  <p>where X.X.X.X is showing actual sender address(as expected), process id(<code>5277586</code>) and forwarding timestamp(<code>Oct 31 12:44:29</code>)</p>
  
  <p>but</p>
  
  <p>expecting to forward only <code>Oct 31 16:44:29.071 UTC: X.X.X.X 5277586: %SYS-3-DUP_TIMER: Same tty2 in linewatch_timers, type 2</code></p>
  
  <p>by removing forwarding timestamp</p>
  
  <hr>
  
  <p>How to forward the required format? </p>