Replying as I can ;) I've not been able to go in-depth through the file, but I ... doh ;) I guess it's all sitting in there. Lol - sorry.
As an apology, here is the FROMHOST bugfix ;) http://rsyslog.cvs.sourceforge.net/rsyslog/rsyslog/syslogd.c?r1=1.380.2. 21&r2=1.380.2.22&pathrev=Branch_Stable_2-0 Rainer > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:rsyslog- > [EMAIL PROTECTED] On Behalf Of Radu Gheorghiu > Sent: Saturday, March 22, 2008 6:14 PM > To: rsyslog-users > Subject: Re: [rsyslog] Property-Based Filters > > Hmm i think i don't understand . Haven't you received the file that i > sent you? Or did i miss something? > > Radu > > Rainer Gerhards wrote: > > Well... Rsyslog tries all kind of things to get hold of the real > host. > > So if you could send me a copy of the one causing problems, I may > (may > > ;)) be able to do something against it. HOSTNAME should always > contain > > something usable, but as you say ... it depends ;) > > > > Rainer > > > > > >> -----Original Message----- > >> From: [EMAIL PROTECTED] [mailto:rsyslog- > >> [EMAIL PROTECTED] On Behalf Of Radu Gheorghiu > >> Sent: Saturday, March 22, 2008 2:48 PM > >> To: rsyslog-users > >> Subject: Re: [rsyslog] Property-Based Filters > >> > >> I don't think that the HOSTNAME problem is a rsyslog problem. > >> I think that the remote host is not sending the HOSTNAME. > >> Remote host is using the classic syslog . > >> and it is configured like this: > >> *.* > >> > > @central-logger > > > >> on the central logger .. i modify my template for debug: > >> $template MyTemplateName,"TheHost:d%HOSTNAME%d %syslogseverity% > >> > > TheMsg: > > > >> %msg%\n" > >> > >> and in the logs: > >> TheHost:dlastd 5 TheMsg: repeated 8 times > >> > >> Seems like the message had no hostname field. and rsyslog thinks > >> "last" > >> is the hostname. > >> > >> Radu > >> > >> _______________________________________________ > >> rsyslog mailing list > >> http://lists.adiscon.net/mailman/listinfo/rsyslog > >> > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog
