<HTML>
<HEAD>
<TITLE>Re: [syslog-ng] Managing hostnames</TITLE>
</HEAD>
<BODY>
<FONT FACE="Verdana, Helvetica, Arial"><SPAN STYLE='font-size:10.0px'>Sorry for following myself.<BR>
I’ve got it<BR>
<BR>
chain_hostnames(no) <- is true by default<BR>
<BR>
Then it works fine<BR>
<BR>
bye<BR>
<BR>
<BR>
le 5/12/06 12:42, Olivier DUCROT à Olivier.Ducrot@easymac.fr a écrit :<BR>
<BR>
</SPAN></FONT><BLOCKQUOTE><FONT FACE="Verdana, Helvetica, Arial"><SPAN STYLE='font-size:10.0px'>Hello list<BR>
<BR>
I’m trying to configure syslog-ng with multiple mail server sources.<BR>
<BR>
It works fine, but I want a little more :<BR>
<BR>
The two line below shows what’s happening :<BR>
<BR>
Dec 5 12:30:37 auxey postfix/smtpd[16360]: <- original log on the mail server<BR>
<BR>
Dec 5 12:30:37 auxey/auxey postfix/smtpd[16360]: <- log stored localy by syslog-ng shortname appeared twice separated by “/”<BR>
<BR>
Here’s my configuration :<BR>
<BR>
On auxey : /etc/syslog.conf<BR>
<BR>
mail.* @syslogserver.mydomain.com:514<BR>
<BR>
On syslogserver.mydomain.com : /usr/local/etc/syslog-ng.conf<BR>
<BR>
options { create_dirs(yes); keep_hostname(no); };<BR>
<BR>
<BR>
source net { udp(); };<BR>
<BR>
destination d_auxey { file("/var/log/tracemail/auxey.log"); };<BR>
destination d_hermes { file("/var/log/tracemail/hermes.log"); };<BR>
<BR>
filter f_auxey { host("auxey"); };<BR>
filter f_hermes { host("hermes"); };<BR>
<BR>
log { source(net); filter(f_auxey); destination(d_auxey); };<BR>
log { source(net); filter(f_hermes); destination(d_hermes); };<BR>
<BR>
<BR>
I tried with keep_hostname(no); and keep_hostname(yes);and without the option with the same result<BR>
<BR>
<BR>
Any idea ?<BR>
<HR ALIGN=CENTER SIZE="3" WIDTH="95%"></SPAN></FONT><SPAN STYLE='font-size:10.0px'><FONT FACE="Monaco, Courier New">_______________________________________________<BR>
syslog-ng maillist - syslog-ng@lists.balabit.hu<BR>
https://lists.balabit.hu/mailman/listinfo/syslog-ng<BR>
Frequently asked questions at <a href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a><BR>
<BR>
</FONT></SPAN></BLOCKQUOTE><SPAN STYLE='font-size:10.0px'><FONT FACE="Monaco, Courier New"><BR>
</FONT></SPAN>
</BODY>
</HTML>