[rsyslog] Property-Based Filters

[Radu Gheorghiu]

Hmm i think i don't understand . Haven't you received the file that i 
sent you? Or did i miss something?

Radu

Rainer Gerhards wrote:
> Well... Rsyslog tries all kind of things to get hold of the real host.
> So if you could send me a copy of the one causing problems, I may (may
> ;)) be able to do something against it. HOSTNAME should always contain
> something usable, but as you say ... it depends ;)
>
> Rainer
>
>   
>> -----Original Message-----
>> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
>> bounces at lists.adiscon.com] On Behalf Of Radu Gheorghiu
>> Sent: Saturday, March 22, 2008 2:48 PM
>> To: rsyslog-users
>> Subject: Re: [rsyslog] Property-Based Filters
>>
>> I don't think that the HOSTNAME problem is a rsyslog problem.
>> I think that the remote host is not sending the HOSTNAME.
>> Remote host is using the classic syslog .
>> and it is configured like this:
>> *.*
>>     
> @central-logger
>   
>> on the central logger .. i modify my template for debug:
>> $template MyTemplateName,"TheHost:d%HOSTNAME%d %syslogseverity%
>>     
> TheMsg:
>   
>> %msg%\n"
>>
>> and in the  logs:
>> TheHost:dlastd 5 TheMsg:  repeated 8 times
>>
>> Seems like the message had no hostname field.  and rsyslog thinks
>> "last"
>> is the hostname.
>>
>> Radu
>>
>> _______________________________________________
>> rsyslog mailing list
>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>>     
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
>
>