On Fri, 9 Oct 2009, RB wrote: > On Fri, Oct 9, 2009 at 06:38, Dag Wieers <[email protected]> wrote: >> You are correct, that is exactly what we do. However with rsyslog v2.0.6 >> it seems there is no %FROMHOST-IP% and the %FROMHOST% property only >> contains the IP address. Maybe there is something else I need to do to get >> the short hostname from DNS, rather than an IP on rsyslog v2 ? > > This usually has more to do with the host's DNS configuration than the > syslog daemon - I've not looked at the 2.x code (ever), but if your > host is configured with a resolver that will perform reverse lookups > of the IPs and with an appropriate domain search list, you should be > able to get the short hostnames. That can be shortcut by placing > entries in /etc/hosts, but that obviously doesn't scale very well.
even the 4.x and 5.x do not populate the fromhost-ip if you have -x on the command line. I think this is a bug, but there are bigger bugs that are being worked on. David Lang _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
