> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:rsyslog- > [EMAIL PROTECTED] On Behalf Of David Darville > Sent: Thursday, August 07, 2008 11:13 AM > To: rsyslog-users > Subject: Re: [rsyslog] Changing hostname field > > On Fri, Aug 01, 2008 at 03:06:43PM +0200, Rainer Gerhards wrote: > > > > > It also looks like I was wrong ;) I have reviewed the case. If I > > > > understand correctly, you get you data from the different unix > > > sockets > > > > and then forward via a single rule. So you can not use different > > > > templates (which most often are the real solution to any such > > > problem, > > > > but are not obvious to most people not directly involved in > rsyslog > > > ;)). > > > > > > > > Is my understanding correct now? > > > > > > Yes, and then I'm splitting log messages on the dedicated log host, > > > based on > > > the hostname field. > > > > > > We are keeping the rsyslogd process outside the jails, to to keep > the > > > syslog > > > traffic on an isolated network segment. > > > > OK, that was fairly easy to do. I have created a special version for > you: > > > > http://download.rsyslog.com/rsyslog/rsyslog-3.21.2-Test1.tar.gz > > > > It contains a new config directive that allows you to specify the > hostname, see last sample on > > > > http://www.rsyslog.com/doc-imuxsock.html > > > > In my lab it works, but I would appreciate if you could test and > verify. > > Thank you very much, that is extremely good service - it works > perfectly. >
Excellent! > I owe you a beer for that....... Be careful: I extremely well remember some things ;) Rainer > > > -- David Darville > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog
