Hi, %FROMHOST% seems to be using the hostname that the host reports (not-always-FQDN), not what DNS reports (always FQDN). What should I use to get the DNS_HOSTNAME...?
Br. ~maymann 2012/1/31 Michael Maymann <[email protected]> > Hi Rainer, > > just noticed the same - see new post...:-) ! > Thanks for your help. > > Br. > ~maymann > > > > 2012/1/31 Rainer Gerhards <[email protected]> > >> > -----Original Message----- >> > From: [email protected] [mailto:rsyslog- >> > [email protected]] On Behalf Of [email protected] >> > Sent: Friday, January 27, 2012 7:35 PM >> > To: rsyslog-users >> > Subject: Re: [rsyslog] Syslogging FQDN logfile/logdir >> howto/links/examples >> > >> > the surest way to tell that the DNS cache is working is to look at >> traffic >> to your >> > DNS server (or more precisely the lack of traffic to that host) >> >> I just checked the code. In the current v6-devel, the dns cache is always >> active. >> >> Rainer >> _______________________________________________ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> > > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/
