I have a couple host on private IPs 10.x.x.x and thus they have no DNS entries. So rather that log the IP in syslog I setup host entries for them.
If I do something like :FROMHOST, isequal, "foobar" -?dialup it doesn't match the /etc/hosts entry I have for foobar. If I setup a catchall entry that goes to a test log I see the line Dec 24 10:06:23 foobar [This is the message] So it's logging the hostname like I would expect it to (rsyslog is aware of the host entry) but I can't match against it? Unfortunately my server is SUPER busy now and I can't put the server in debug mode to check what's coming across. Is there another way I could check this? -- Scott Baker - Canby Telcom RHCE - System Administrator - 503.266.8253 _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog

