[rsyslog-notify] Forum Thread: Re: Property Replacer %fromhost-ip% - (Mode 'edit_last_post')

[noreply at adiscon.com]

User: Thijn 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26859#p26859

Message: 
----------
Nope, not Cisco at all.
I should maybe have been a bit more clear, i applogize.. The log line shown
is the log result after it went through the rsyslog filter. It is not the
raw log from the switch.
These are Avaya switches, on most Avaya switches one can not define the
source interface on which to send the logs from resulting in a different
source IP then the IP
where we manage switches. And this is the crux of the problem. So my idea
is to use the property replacer to change the IP addres in the fromhost-ip
field.
And so.. the challenge is the %fromhost-ip% and the replacement of a part
of the IP with another.
So the rfc compliance with a timestamp is another discussion i think ;)