[rsyslog-notify] Forum Thread: Re: Property Replacer %fromhost-ip% - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26861#p26861

Message: 
----------
fromhost-ip is a read-only field

if you log the message with the template RSYSLOG_DebugFormat you can see
all the details of the log.

fromhost-ip isn't shown in the log message by default, what's shown by
default is the hostname that the sending machine puts in the message.
rsyslog will use fromhost if there is no hostname (and it's able to detect
the problem)

but the debug format log will show exactly what is being sent by the
device.

It sounds as if the Avaya switches are running some variation of unix under
the covers. If so, we should be able to get at where it stores the syslog
config and change things.