[rsyslog-notify] Forum Thread: Re: Property Replacer %fromhost-ip% - (Mode 'edit_last_post')

[noreply at adiscon.com]

User: Thijn 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26859#p26859

Message: 
----------
Nope, not Cisco at all
These are Avaya switches, on certain Avaya switches one can not define the
source interface on which to send the logs resulting in a different source
IP then the IP
where we manage switches. And this is the crux of the problem. So my idea
is to use the property replacer to change the IP addres in the fromhost-ip
field.
And so.. the challenge is the %fromhost-ip% and the replacement of a part
of the IP with another.
So the rfc compliance with a timestamp is another discussion i think ;)