Really quick: check the HOSTNAME (or so ;)) property. ----- Ursprüngliche Nachricht ----- Von: "Scott Baker" <[EMAIL PROTECTED]> An: "rsyslog-users" <[email protected]> Gesendet: 24.12.07 19:10 Betreff: [rsyslog] Hostname matching with DNS
I have a couple host on private IPs 10.x.x.x and thus they have no DNS entries. So rather that log the IP in syslog I setup host entries for them. If I do something like :FROMHOST, isequal, "foobar" -?dialup it doesn't match the /etc/hosts entry I have for foobar. If I setup a catchall entry that goes to a test log I see the line Dec 24 10:06:23 foobar [This is the message] So it's logging the hostname like I would expect it to (rsyslog is aware of the host entry) but I can't match against it? Unfortunately my server is SUPER busy now and I can't put the server in debug mode to check what's coming across. Is there another way I could check this? -- Scott Baker - Canby Telcom RHCE - System Administrator - 503.266.8253 _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog

