> Now you may ask why i didn't use HOSTNAME and only HOSTNAME after all? > Well.. it looks like there are several messages that don't contain the > HOSTNAME field and this breaks everything.
I had a quick look at the code and I can't see why HOSTNAME should not be filled. Could you provide me a sample of such a message? That would be most interesting. I think I've also identified why FROMHOST is missing, but I'd like to evaluate it a bit more. If you can provide a sample of missing hostnames, it would very helpful to have a debug log from such a message being received and processed - but the most important thing is to see what the source of this all is... Thanks, Rainer _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog

