<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
I don't believe there is a native way to do this in syslog-ng, but
there is a method here:
<a class="moz-txt-link-freetext" href="http://www.syslog.org/logged/pot-of-syslog-ng-tricks-version-3/">http://www.syslog.org/logged/pot-of-syslog-ng-tricks-version-3/</a> that
describes using a template to basically rewrite any part of the
syslog message. That example is for rewriting the
facility/priority, it should give you enough to go on to rewrite the
host field.<br>
<br>
Regards,<br>
<br>
Jerry<br>
On 7/23/2010 2:06 PM, lecalcot wrote:
<blockquote cite="mid:C86F443A.184E5%25lecalcot@cisco.com"
type="cite">
<title>Rewrite Hostname Field of Syslog Header</title>
<font face="Calibri, Verdana, Helvetica, Arial"><span
style="font-size: 10pt;">Hi,<br>
<br>
I’m wondering if syslog-ng is capable of rewriting the
hostname field in the header of syslogs as they are forwarded
to a remote loghost. Is this possible?<br>
<br>
Thanks,<br>
Lee</span></font>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a>
</pre>
</blockquote>
<br>
</body>
</html>