hi,all now,my log agent use rsyslog 5.8.x,and configure like this
$PreserveFQDN on #$LocalHostName l-craw1.vc.cn6 *.*;mail.none @l-logserver.s1 and in l-logserver.s1,configure like this $template TraditionalFormatWithPRI,"%pri-text%: %timegenerated% %HOSTNAME% %syslogtag%%msg:::drop-last-lf%\n" $template SepFile,"/var/log/hosts/%HOSTNAME%/%$YEAR%-%$MONTH%-%$DAY%.log" *.* ?SepFile;TraditionalFormatWithPRI but in the hosts directory,we see incorrect HOSTNAME daemon.info: Feb 28 18:37:03 l-logagent snmpd[2637]: Connection from UDP: [192.168.224.16]:50423->[192.168.232.43] but,at the same time,has correct HOSTNAME write kern.info: Feb 28 18:30:31 l-logagent kernel: imklog 5.8.10, log source = /proc/kmsg started. syslog.info: Feb 28 18:30:31 l-logagent rsyslogd: [origin software="rsyslogd" swVersion="5.8.10" x-pid="24572" x-info="http://www.rsyslog.com";] start why this?what happen? seem like about facility or priority related !! thanks&Best Regards _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
