Re: [ossec-list] Hostname instead of ip in alert from syslog-device

[David Lang]

Sorry, I'm replying to a different mailing list than I thought I was (I thought 
I was replying to a message on the rsyslog mailing list)

On Mon, 7 May 2018, David Lang wrote:
please log some message using the template RSYSLOG_DebugFormat so that we can 
see what variables are in there.

There is not a direct way to call name resolution if you have an IP address 
in the content, but you could use a table lookup.

David Lang