[rsyslog-notify] Forum Thread: Re: Perform DNS lookup on $hostname - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25154#p25154

Message: 
----------
in your output template, add @cee: before the first { character. This is a
legacy requriement due to the fact that this support was put in for cee
stuff and Rainer wanted to make sure that it didn't try to decode other
things. This is something that should be changed, but hasn't been yet.

The other thing is that your template isn't a valid syslog message, a valid
syslog message need to be

<%pri%>%timestamp% %hostname% %syslogtag% and then the message here

since you are missing all of that header info in your template, the copy of
rsyslog that's parsing it isn't finding the syslogtag, programname,
hostname, and timestamp because you aren't putting them in the template.