User: ctr Forumlink: http://kb.monitorware.com/viewtopic.php?p=26161#p26161 Message: ---------- I think the problem is the space between "Oracle" and "Audit". As a space is invalid in RFC3164 rsyslog has no other choice than to assume "Oracle" is the hostname.