[rsyslog] Wrongly formatted messages from kernel/netconsole

[david at lang.hm]

On Fri, 9 Oct 2009, RB wrote:

> On Fri, Oct 9, 2009 at 06:38, Dag Wieers <dag at wieers.com> wrote:
>> You are correct, that is exactly what we do. However with rsyslog v2.0.6
>> it seems there is no %FROMHOST-IP% and the %FROMHOST% property only
>> contains the IP address. Maybe there is something else I need to do to get
>> the short hostname from DNS, rather than an IP on rsyslog v2 ?
>
> This usually has more to do with the host's DNS configuration than the
> syslog daemon - I've not looked at the 2.x code (ever), but if your
> host is configured with a resolver that will perform reverse lookups
> of the IPs and with an appropriate domain search list, you should be
> able to get the short hostnames.  That can be shortcut by placing
> entries in /etc/hosts, but that obviously doesn't scale very well.

even the 4.x and 5.x do not populate the fromhost-ip if you have -x on the 
command line.

I think this is a bug, but there are bigger bugs that are being worked on.

David Lang