[rsyslog] How rsyslog derives hostname

[Harry Putnam]

"Rainer Gerhards" <rgerhards at hq.adiscon.com> writes:

> I need to re-read this more careful, but for now let me say that rsyslog does
> not touch /etc/hosts at all. It exlusively relies on what is returned by the
> OS. But the "source" property is not locally generated, it contains whatever
> the sender placed into the relevant field.

Good info ... thanks.  So my host is sending the miss-typed host name
to rsyslog by having it in the log line 
   DATE hostname => blah

So I guess the question is how does my host derive the hostname it
sticks into log messages.

So thanks... and I already know the localhost will scan the /etc/hosts
file when resolving the localhost name... so there is the culprit.

Of course the culprit is really me, who miss-typed the host name.

Thanks.