[rsyslog-notify] Forum Thread: Re: Forward log TCP/UDP - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24822#p24822

Message: 
----------
Ok, that configuration looks sane, you only give one example of the log
line, so I don't know if that's the log on the client or on the server.

Also, sanitizing that logline may hide the info that tells us what's going
on (it could be odd characters in the hostname that are causing issues)

It's also useful to log with the format RSYSLOG_DebugFormat on the central
server so that you can see the raw message that it received from the client
as well as how everything was parsed apart.

Rsyslog will not change the hostname from what the original system that
generated the log put in there, unless what the client put in there doesn't
look like a valid hostname or you have other configuration to change what's
sent (which you don't in this case)