On Fri, 9 Oct 2009, RB wrote: > On Fri, Oct 9, 2009 at 06:38, Dag Wieers <[email protected]> wrote: >> You are correct, that is exactly what we do. However with rsyslog v2.0.6 >> it seems there is no %FROMHOST-IP% and the %FROMHOST% property only >> contains the IP address. Maybe there is something else I need to do to get >> the short hostname from DNS, rather than an IP on rsyslog v2 ? > > This usually has more to do with the host's DNS configuration than the > syslog daemon - I've not looked at the 2.x code (ever), but if your > host is configured with a resolver that will perform reverse lookups > of the IPs and with an appropriate domain search list, you should be > able to get the short hostnames. That can be shortcut by placing > entries in /etc/hosts, but that obviously doesn't scale very well.
We do have a working DNS resolver and reverse lookups work fine. I assume that the problem is that with rsyslog v2 %FROMHOST% simply is not resolved. To be sure, I will have to dig into the sources. -- -- dag wieers, [email protected], http://dag.wieers.com/ -- [Any errors in spelling, tact or fact are transmission errors] _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
