[email protected] a écrit sur 19/09/2013 12:20:34 PM : > De : "Christopher LILJENSTOLPE" <[email protected]> > I would agree with Andrew in both points. A field would be best, > however, in the absence of such a field, the HOSTNAME should be from > Device A, not Device B. > > Christopher
<operator hat on> Agreed. Device A should be in the field, having device B is not of much use. Aggregating both names in the same fields seems like a bad idea, it would only confuse correlation at the receiving end (a Splunk for example). /JF
_______________________________________________ OPSAWG mailing list [email protected] https://www.ietf.org/mailman/listinfo/opsawg
