[rsyslog] quick question regarding property values in rsyslog-2.0.6 [NC]

[Rainer Gerhards]

> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> bounces at lists.adiscon.com] On Behalf Of Kambiz Aghaiepour
> Sent: Wednesday, May 20, 2009 3:04 PM
> To: rsyslog-users
> Subject: Re: [rsyslog] quick question regarding property values in rsyslog-
> 2.0.6 [NC]
> 
> Thank you for the response Vivien.  One thing I've noticed is that I get
> the same behavior whether I use %source% or %FROMHOST%.  However, I did
> notice something interesting.  If the sending host is say
> somehost.<somedomain>, and <somedomain> is the same domain as that of
> the central loghost, then both %source% and  %FROMHOST% expand out to
> the short form of the hostname.  However, if the sender's domain differs
> than that of the loghost, the %source% and %FROMHOST% expand to the FQDN.

That's rooted in some backward compatibility to sysklogd. In recent builds,
you can configure the behavior. I don't know any more if that was possible in
v2, too (but I guess not).

Rainer