Depending on the configuration, Linux event timestamps may not include the year. To deduce the correct year for back-filled events, the last modified timestamp is used as a starting point. This is a best effort to determine the correct year for the events. It may not be accurate in all cases.
Back-filled Events Timestamp
- Published on Sep 11, 2026
- 1 minute(s) read
Was this article helpful?