ok I may be looking at this incorrectly, from other posts on the mailing lists, and responses, rsyslog does not really look at /etc/hosts?
from some of the responses that I am reading I see that it may depend on the distro the gethostname() I guess determines the localhost so the question is this: I am filtering with hostname contains "myownmadeupname" then omfile to /path/to/log what I am running into is that rsyslog is resolving hostnames from what it seems to be my main dns server which would not work for my current scenario of custom "contains" parameters. if I disable dns lookups with the -x option I dont seem to getting any logs at all. So I think I may be confusing myself..? any input will be appreciated Robert On Fri, Jan 17, 2014 at 9:06 AM, robert s <rsyslogrob...@gmail.com> wrote: > it shows that the flag is started > > ps -fe | grep rsyslog > root 8064 1 1 09:05 ? 00:00:00 /sbin/rsyslogd -x -i > /var/run/syslogd.pid > > > Robert > > > On Fri, Jan 17, 2014 at 9:02 AM, robert s <rsyslogrob...@gmail.com> wrote: >> I tried changing nsswitch to not do dns, and configured nscd to not do >> lookups, and have even disabled nscd, and removing resolve.conf >> settings >> >> Robert >> >> >> On Thu, Jan 16, 2014 at 3:14 PM, robert s <rsyslogrob...@gmail.com> wrote: >>> Thanks for the response Mike, I rsysced the configuration from the >>> test servers to the production servers. >>> >>> Robert >>> >>> >>> On Thu, Jan 16, 2014 at 3:08 PM, Mike Hoskins (michoski) >>> <micho...@cisco.com> wrote: >>>> Not sure why it would just start on your prod servers, but I got bit one >>>> time by copy/paste and using %FROMHOST% vs %HOSTNAME% in templates. Are >>>> you using the same config on your test and prod hosts? >>>> >>>> -----Original Message----- >>>> From: robert s <rsyslogrob...@gmail.com> >>>> Reply-To: rsyslog-users <rsyslog@lists.adiscon.com> >>>> Date: Thursday, January 16, 2014 3:02 PM >>>> To: rsyslog-users <rsyslog@lists.adiscon.com> >>>> Subject: [rsyslog] dns lookup disabled >>>> >>>>>Hey guys long time >>>>> >>>>>So far I have tested Rsyslog to the max and was able to log 400,000 >>>>>messages per second on a 1gb line, so Im loving rsyslog! >>>>> >>>>>I have build production servers, rhel 6.4 with rsyslog 7.5.6, but >>>>>currently I am having an issue with dns lookup, I have >>>>>/init.d/rsyslog configured with -x -i. to disable dns lookup, but for >>>>>some reason Rsyslog still resolving names. >>>>> >>>>>I have flushed dns, changed nsswitch disabling dns. >>>>> >>>>>Any ideas why that may be? >>>>> >>>>>Thanks in advanced >>>>> >>>>>Robert >>>>>_______________________________________________ >>>>>rsyslog mailing list >>>>>http://lists.adiscon.net/mailman/listinfo/rsyslog >>>>>http://www.rsyslog.com/professional-services/ >>>>>What's up with rsyslog? Follow https://twitter.com/rgerhards >>>>>NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >>>>>of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >>>>>DON'T LIKE THAT. >>>> >>>> _______________________________________________ >>>> rsyslog mailing list >>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >>>> http://www.rsyslog.com/professional-services/ >>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >>>> DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
