[rsyslog-notify] Forum Thread: Strip StackID from host - (Mode 'post')

noreply at adiscon.com noreply at adiscon.com
Sat Feb 28 14:48:04 CET 2015


User: mmacdonald70 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25287#p25287

Message: 
----------
I am using the following template to get daily files per host:

$template DailyPerHostLogs, "/var/log/%HOSTNAME%.log"

*.* -?DailyPerHostLogs

This works fine for most of the devices on my network but I have a number
of Dell switches that append a StackID to the host in the message.  Example
messages from these hosts appear to be:

Feb 28 07:16:00 192.168.2.2-1 <MESSAGE>

The "-1" is a stackid which I can't seem to remove from the switch side. 
Unfortunately this means that I am unable to resolve the IP address so we
get the syslog in a file like 192.168.2.2-1.log

How could I fix this?


More information about the rsyslog-notify mailing list