Well... Rsyslog tries all kind of things to get hold of the real host. So if you could send me a copy of the one causing problems, I may (may ;)) be able to do something against it. HOSTNAME should always contain something usable, but as you say ... it depends ;)
Rainer > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:rsyslog- > [EMAIL PROTECTED] On Behalf Of Radu Gheorghiu > Sent: Saturday, March 22, 2008 2:48 PM > To: rsyslog-users > Subject: Re: [rsyslog] Property-Based Filters > > I don't think that the HOSTNAME problem is a rsyslog problem. > I think that the remote host is not sending the HOSTNAME. > Remote host is using the classic syslog . > and it is configured like this: > *.* @central-logger > > on the central logger .. i modify my template for debug: > $template MyTemplateName,"TheHost:d%HOSTNAME%d %syslogseverity% TheMsg: > %msg%\n" > > and in the logs: > TheHost:dlastd 5 TheMsg: repeated 8 times > > Seems like the message had no hostname field. and rsyslog thinks > "last" > is the hostname. > > Radu > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog
