Package: rsyslog
Version: 3.18.6-3
Severity: normal

Looks like fresh lenny installs come with rsyslog instead of old
syslogd.

In our network, logs from all hosts are sent to one server, called
loghost, using remote logging. There, logs are checked by logcheck.

Most of the net, including loghost, currently runs etch. But there are
several new hosts with lenny.

On these hosts, I've added this to /etc/rsyslogd.conf:

# Send all logs to loghost
*.*     @loghost.lvknet

This works, however on loghost (running syslogd from etch), all lines
got from lenny hosts have hostname doubled:

Jan 22 19:20:22 buki.lvknet buki /USR/SBIN/CRON[31333]: (root) CMD (cd / && 
run-parts --report /etc/cron.hourly)

Here, hostname (buki) is written twice.

This is not good, since that breaks all logcheck rules that come from
various packages.

Btw, in local log files, hostname is not doubled.

Any possibility to make rsyslogd not to double hostname when sending
logs to remote?

-- System Information:
Debian Release: 5.0
  APT prefers testing
  APT policy: (620, 'testing'), (600, 'unstable'), (580, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-1-xen-686 (SMP w/4 CPU cores)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to