I use the following global options in my syslog-ng.conf file and don't have any information added to messages when they're forwarded from one syslog-ng server to another:<BR> <BR>options { time_reopen (10);<BR> log_fifo_size (10000);<BR> long_hostnames (off);<BR> use_dns (no);<BR> use_fqdn (no);<BR> create_dirs (no);<BR> dir_perm (0755);<BR> perm(0644);<BR><STRONG> chain_hostnames(no);<BR> keep_hostname (yes);</STRONG><BR> flush_lines (0);<BR> };<BR><BR>Also, does the relay server use a template to reformat the message? If so, I would remove that as well.<BR> <BR>HTH,<BR> <BR>Steve<BR> <BR><BR>----- Message d'origine -----<BR>De: gatfi sami <pfegatfi.sami@gmail.com><BR>Date: Vendredi, 17 Avril 2009, 11:18<BR>Objet: [syslog-ng] message source hostname not displayed relay's hostname displaied instedd<BR>À: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu><BR><BR><BR>
<DIV dir=ltr><FONT style="BACKGROUND-COLOR: #f5f8f0; FONT-STYLE: normal; FONT-SIZE: 14px; FONT-WEIGHT: normal">> </FONT>hi <BR><FONT style="BACKGROUND-COLOR: #f5f8f0; FONT-STYLE: normal; FONT-SIZE: 14px; FONT-WEIGHT: normal">> </FONT>i have syslog-ng 2.O.9-27 on sles11 32bite (SUSE Entreprise server 11) on 3 virtual machine<BR><BR><FONT style="BACKGROUND-COLOR: #f5f8f0; FONT-STYLE: normal; FONT-SIZE: 14px; FONT-WEIGHT: normal">> </FONT>i use the following syslog organisation<BR><BR><FONT style="BACKGROUND-COLOR: #f5f8f0; FONT-STYLE: normal; FONT-SIZE: 14px; FONT-WEIGHT: normal">> </FONT>a <B>syslog clien</B>t (read error log and sends them to a relay)<BR><BR><FONT style="BACKGROUND-COLOR: #f5f8f0; FONT-STYLE: normal; FONT-SIZE: 14px; FONT-WEIGHT: normal">> </FONT>the <B>relay</B> frorwords the message to a syslog-server<BR><BR><FONT style="BACKGROUND-COLOR: #f5f8f0; FONT-STYLE: normal; FONT-SIZE: 14px; FONT-WEIGHT: normal">> </FONT>The <B>syslog server</B> writes the messages in a pipe binde to a mysql database<BR><BR><FONT style="BACKGROUND-COLOR: #f5f8f0; FONT-STYLE: normal; FONT-SIZE: 14px; FONT-WEIGHT: normal">> </FONT>untill now everithing is working perfectly <BR><BR><FONT style="BACKGROUND-COLOR: #f5f8f0; FONT-STYLE: normal; FONT-SIZE: 14px; FONT-WEIGHT: normal">> </FONT>but<BR><BR><FONT style="BACKGROUND-COLOR: #f5f8f0; FONT-STYLE: normal; FONT-SIZE: 14px; FONT-WEIGHT: normal">> </FONT>in the syslog server i olways founf the relai host name ip adress<BR><BR><FONT style="BACKGROUND-COLOR: #f5f8f0; FONT-STYLE: normal; FONT-SIZE: 14px; FONT-WEIGHT: normal">> </FONT>i tried HOST_FROM in the template writing to the pipe it is always the same the relay's hostname<BR><BR><FONT style="BACKGROUND-COLOR: #f5f8f0; FONT-STYLE: normal; FONT-SIZE: 14px; FONT-WEIGHT: normal">> </FONT>destination d_mysql {<BR><FONT style="BACKGROUND-COLOR: #f5f8f0; FONT-STYLE: normal; FONT-SIZE: 14px; FONT-WEIGHT: normal">> </FONT>pipe("/opt/topnet/mnt/mysql.pipe"<BR><FONT style="BACKGROUND-COLOR: #f5f8f0; FONT-STYLE: normal; FONT-SIZE: 14px; FONT-WEIGHT: normal">> </FONT>template("INSERT INTO logs (host, facility, priority, level, tag, date,<BR><FONT style="BACKGROUND-COLOR: #f5f8f0; FONT-STYLE: normal; FONT-SIZE: 14px; FONT-WEIGHT: normal">> </FONT>time, program, msg) VALUES ( '$HOST_FROM', '$FACILITY', '$PRIORITY', '$LEVEL','$TAG',<BR><FONT style="BACKGROUND-COLOR: #f5f8f0; FONT-STYLE: normal; FONT-SIZE: 14px; FONT-WEIGHT: normal">> </FONT>'$YEAR-$MONTH-$DAY', '$HOUR:$MIN:$SEC', '$PROGRAM', '$MSG' );\n") template-escape(yes));<BR><FONT style="BACKGROUND-COLOR: #f5f8f0; FONT-STYLE: normal; FONT-SIZE: 14px; FONT-WEIGHT: normal">> </FONT>};<BR><BR><BR><FONT style="BACKGROUND-COLOR: #f5f8f0; FONT-STYLE: normal; FONT-SIZE: 14px; FONT-WEIGHT: normal">> </FONT>imagine if i have aot of cilents with each one a diiferent error log i will see nothing but the relai's hostname<BR><FONT style="BACKGROUND-COLOR: #f5f8f0; FONT-STYLE: normal; FONT-SIZE: 14px; FONT-WEIGHT: normal">> </FONT>need hepl here <BR><BR><FONT style="BACKGROUND-COLOR: #f5f8f0; FONT-STYLE: normal; FONT-SIZE: 14px; FONT-WEIGHT: normal">> </FONT>thks<BR><BR>> ______________________________________________________________________________<BR>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng<BR>> Documentation: <BR>> http://www.balabit.com/support/documentation/?product=syslog-ng<BR>> FAQ: http://www.campin.net/syslog-ng/faq.html<BR>> <BR></DIV>