<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
FONT-SIZE: 10pt;
FONT-FAMILY:Tahoma
}
</style>
</head>
<body class='hmmessage'>
Probleme solved with:<BR>
<BR>
Box1 : keep_hostname(no) / Chain_hostname(yes)<BR>
Box2 : keep_hostname(no) / Chain_hostname(yes)<BR>
Syslog server: keep_hostname(no) / Chain_hostname(yes)<BR>
<BR>
Thanks for the time spent.<BR>
<BR>
S.Gault<BR><BR>> Date: Fri, 19 Sep 2008 14:48:41 -0700<BR>> From: erempel@uvic.ca<BR>> To: syslog-ng@lists.balabit.hu<BR>> Subject: Re: [syslog-ng] Syslog relay tag<BR>> <BR>> I will need to see the rest of your config file. Specifically, the "template" that you<BR>> are using on all of the systems.<BR>> <BR>> Gault Stephane wrote:<BR>> > Well doesn't work for me here's the detail :<BR>> > <BR>> > BOX1: 192.168.5.80 : hostname= APP_80<BR>> > BOX2: 192.168.5.65 : hostname= APP_65<BR>> > Syslog server: 192.168.5.203<BR>> > <BR>> > config file :<BR>> > <BR>> > BOX1: APP_80<BR>> > <BR>> > options {<BR>> > chain_hostnames(yes);<BR>> > keep_hostname(no)<BR>> > long_hostnames(off);<BR>> > sync(0);<BR>> > stats(43200);<BR>> > perm(0640);<BR>> > create_dirs(yes);<BR>> > use_fqdn(yes);<BR>> > };<BR>> > <BR>> > destination syslog_server { tcp("192.168.5.65" port(514)); };<BR>> > <BR>> > BOX2: APP_65<BR>> > <BR>> > options {<BR>> > chain_hostnames(yes);<BR>> > keep_hostname(yes);<BR>> > long_hostnames(off);<BR>> > sync(0);<BR>> > stats(43200);<BR>> > perm(0640);<BR>> > create_dirs(yes);<BR>> > use_fqdn(yes);<BR>> > };<BR>> > <BR>> > destination syslog_server { tcp("192.168.5.203" port(514)); };<BR>> > <BR>> > And My syslog server: 203:<BR>> > <BR>> > options {<BR>> > chain_hostnames(yes);<BR>> > keep_hostname(yes);<BR>> > long_hostnames(off);<BR>> > sync(0);<BR>> > stats(43200);<BR>> > perm(0640);<BR>> > create_dirs(yes);<BR>> > use_fqdn(yes);<BR>> > };<BR>> > <BR>> > And i get those king of logs when i generate some log on APP_880:<BR>> > <BR>> > <BR>> > Sep 18 12:41:37 App_65 192.168.5.52 - - [18/Sep/2008:12:41:36 +0200] "GET /tutorial4/java/javaOO/lifecycle.html HTTP/1.1" 200 2620<BR>> > Sep 18 12:41:37 App_65 192.168.5.52 - - [18/Sep/2008:12:41:36 +0200] "GET /tutorial4/java/javaOO/objectcreation.html HTTP/1.1" 200 8047<BR>> > Sep 18 12:41:39 App_65 192.168.5.52 - - [18/Sep/2008:12:41:37 +0200] "GET /tutorial4/java/javaOO/usingobject.html HTTP/1.1" 200 10133<BR>> > <BR>> > It see the hostname of the relay box and my IP as the generator of the logs, but doesn't indicate de real source of logs : APP_80 ou 192.168.5.80.<BR>> > <BR>> > Any clue of what an i doing wrong ?<BR>> > <BR>> > S.Gault<BR>> > <BR>> > ________________________________<BR>> > Discutez sur Messenger où que vous soyez ! Mettez Messenger sur votre mobile !<http://www.messengersurvotremobile.com/><BR>> > <BR>> <BR>> <BR>> -- <BR>> Evan Rempel erempel@uvic.ca<BR>> Senior Programmer Analyst 250.721.7691<BR>> University Systems, University of Victoria<BR>> ______________________________________________________________________________<BR>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng<BR>> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng<BR>> FAQ: http://www.campin.net/syslog-ng/faq.html<BR>> <BR><BR><br /><hr />Votre correspondant a choisi Hotmail et profite d'un stockage quasiment illimité. <a href='http://www.windowslive.fr/hotmail/default.asp' target='_new'> Créez un compte Hotmail gratuitement !</a></body>
</html>