Hi Salim, sounds like a malformed message is causing this:
http://www.rsyslog.com/doc-syslog_parsing.html Rainer > -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Salim Engin > Sent: Wednesday, October 07, 2009 3:23 PM > To: [email protected] > Subject: [rsyslog] Sender IP or Hostname > > Hello all, > > I have just installed Debain 5.0.3 with its default syslog server which > is > rsyslog 3.18.6 . and I configured it to receive external syslog > messages > from our network devices. > > What the problem is that, the sender IP or hostname of external devices > which send syslog messages is not displayed in the log . Please see the > example below; > > > 2009-10-07T16:09:39.407770+03:00 debian dhcpd: DHCPACK on 172.10.10.101 > to > 00:24:7e:11:eb:49 (stajerstac) via vlan110 --------> "debian" hostname > is > OK > 2009-09-06T14:04:53+03:00 - rCT0[184]: craft(8) : RTRV-HDR:::P6099; > ----------------------------------------------------------------------- > ------------> > Neither IP nor hostname is printed > 2009-09-06T14:04:56+03:00 - clij[258]: [email protected](21) : info > configure system sntp ------------------------------------------------- > ---> > Neither IP nor hostname is printed. Instead there is dash after the > timestamp. > > > I tried many things but was not able to make it work. > > Can someone help me to fix this ? > > Thanks > > Salim Engin > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
