[rsyslog] Property-Based Filters

[Rainer Gerhards]

> Now you may ask why i didn't use HOSTNAME and only HOSTNAME after all?
> Well.. it looks like there are several messages that don't contain the
> HOSTNAME field and this breaks everything.

I had a quick look at the code and I can't see why HOSTNAME should not be filled. Could you provide me a sample of such a message? That would be most interesting. I think I've also identified why FROMHOST is missing, but I'd like to evaluate it a bit more.

If you can provide a sample of  missing hostnames, it would very helpful to have a debug log from such a message being received and processed - but the most important thing is to see what the source of this all is...

Thanks,
Rainer