It was thus said that the Great Rainer Gerhards once stated: > > The problem is that syslog() does not emit the format recommended by RFC3164, > so no message provided over that channel includes a hostname. Things would be > heavily broken if I would simply ignore that fact.
Can't it be added as part of the parsing? Even if it's just "localhost"? Or a parameter to the imuxsock module? My own syslogd fills in missing fields with sane (at least to me) defaults. -spc _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com

