Thanks a lot Richard! Tried as you suggested and hostname is now back in the message!
On Wed, Jan 18, 2017 at 12:32 AM, Richard S. Westmoreland < [email protected]> wrote: > Instead of syslog("graylog.lab.xxx.xxx" port(5514)); try: > > network("graylog.lab.xxx.xxx" port(5514)); > > This used to be udp() or tcp() depending on the transport you wanted. > > Newer versions of syslog-ng documentation have emphasized IETF/RFC5424 > examples, but what you are looking for is the older BSD/RFC3164 formatted > message. > > > > On Jan 18, 2017, at 12:30 PM, Li Li <[email protected]> wrote: > > > > syslog("graylog.lab.xxx.xxx" port(5514)); > > -- > You received this message because you are subscribed to a topic in the > Google Groups "Graylog Users" group. > To unsubscribe from this topic, visit https://groups.google.com/d/ > topic/graylog2/I2VNhU3sFcc/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > [email protected]. > To view this discussion on the web visit https://groups.google.com/d/ > msgid/graylog2/F7E70BCB-C248-4DA8-AB1B-B0C8A61533BB%40gmail.com. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CAN-mCbMQT83G8v3abbeN4GShy%2BE%3D%3D%3DB%2B-5Ym-5Yk%3DDhbqtAfwA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
