Can you post the output of %rawmsg% - I think it has to do with the message. However, FROMHOST should always work. I would be useful if you run it in debug mode (-d -n) and post that output, too.
Rainer > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Kaul, Ashutosh > Sent: Thursday, August 16, 2007 3:14 PM > To: rsyslog-users > Subject: [rsyslog] Rsyslog /var/log/messages > > Hi all, > > I have a installed and configured rsyslog-1.17.6 for a centralized > syslog server, currently it's accepting syslogs at both UDP as well as > TCP but when I check my /var/log/messages file I find that it doesn't > log the hostname. > > Pasting the one of the syslog > Aug 16 08:07:56 50091162 08/16/2007 07:08:03.390 ..truncated > > In place of 50091162 it should log the ip address. > > I did some initial research in which it was mentioned the > template needs > to have %FROMHOST% rather than %HOSTNAME% which I did but to no luck. > > http://www.rsyslog.com/PNphpBB2-viewtopic-t-101.phtml > > Thanks in advance for help. > > Regards, > Ashutosh > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog
