On Wed, Nov 24, 2010 at 9:25 PM, <[email protected]> wrote: > > hostname would be whatever is put in the log by the sending server. > > fromhost should be a reverse lookup of the IP address you received the log > from (note that if this is relayed through another host, you get the name/IP > of the relay, not the sender) > > if you are only getting a short name, check your /etc/hosts file to see if > you have it listed there with a short name first (name resolution will use > /etc/hosts before going to DNS, and a name lookup into /etc/hosts will > return the first name on the line) >
After much searching I discovered that I needed to set the following to avoid rsyslog making the names short to be compatible with sysklog: $PreserveFQDN on After setting this, I now have the full hostnames. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
