<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    well - if you look in the documentation, I think you would see it -
    but "HOST_FROM" is IP address, "HOST" is name if it resolves and
    address otherwise.<br>
    <br>
    Not sure about your other question.<br>
    <br>
    Jim<br>
    <br>
    <div class="moz-cite-prefix">On 06/05/2014 09:06 PM, Justin B wrote:<br>
    </div>
    <blockquote
cite="mid:CACLzEeJOv+t3EK-ULsVOkPHKQp_0swtBGbX6sZx+wU0LaCkC3Q@mail.gmail.com"
      type="cite">
      <div>destination r_dest&nbsp; {<br>
        file("/u01//$HOST_FROM/messages.$YEAR.$MONTH.$DAY.$HOUR"<br>
        owner(root) group(test) perm(0640)<br>
template("|${S_FULLDATE}|${ETYPE}|${EHOSTNAME}|${ESOURCE}|${EOUTCOME}|${EMSG}|${EUSERID}\n")<br>
        &nbsp;);&nbsp;&nbsp;&nbsp; };<br>
      </div>
      <div>&nbsp;</div>
      <div>Here you go..</div>
      <div>&nbsp;</div>
      <div>Also how to control the java stack trace exception that I
        receive in EMSG COLUMN&nbsp; in the above.<br>
        <br>
      </div>
      <div class="gmail_quote">On Thu, Jun 5, 2014 at 8:53 PM, Jim
        Hendrick <span dir="ltr">&lt;<a moz-do-not-send="true"
            href="mailto:jrhendri@roadrunner.com" target="_blank">jrhendri@roadrunner.com</a>&gt;</span>
        wrote:<br>
        <blockquote style="BORDER-LEFT:#ccc 1px solid;MARGIN:0px 0px 0px
          0.8ex;PADDING-LEFT:1ex" class="gmail_quote">
          <div text="#000000" bgcolor="#FFFFFF">we would need to see the
            destination definition to assist<br>
            <br>
            Jim
            <div>
              <div class="h5"><br>
                <br>
                <br>
                <div>On 06/05/2014 01:59 PM, Justin B wrote:<br>
                </div>
              </div>
            </div>
            <blockquote type="cite">
              <div>
                <div class="h5">
                  <div><br clear="all">
                    Hi</div>
                  <div>&nbsp;</div>
                  <div>When I receive the application messaged from a
                    different server to my syslog-ng server it is trying
                    to create the messages under the directory name with
                    IP address instead of the Application Server
                    Hostname.</div>
                  <div>What can be done baout this??</div>
                  <div>&nbsp;</div>
                  <div>i used the following options in syslog-ng.conf</div>
                  <div>&nbsp;</div>
                  <div>options {<br>
                    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; use_fqdn(no);<br>
                    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; flush_lines(0);<br>
                    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; keep_hostname(yes);<br>
                    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; check_hostname(yes);<br>
                    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; chain_hostnames(yes);<br>
                    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; create_dirs(yes);<br>
                    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; dir_owner(root);<br>
                    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; dir_group(test);<br>
                    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; dir_perm(0750);<br>
                    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; #use_dns(persist_only);<br>
                    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; use_dns(yes);<br>
                    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; #dns_cache_hosts(/etc/hosts);<br>
                    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; dns_cache(yes);<br>
                    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; dns_cache_expire(87600);<br>
                    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ts_format(iso);<br>
                    #&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; keep_timestamp(no);<br>
                    &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; };<br>
                    <br>
                    -- </div>
                  <div>&nbsp;</div>
                  <div>Appreciate your quick help..</div>
                  <div>&nbsp;</div>
                  <div>&nbsp;</div>
                  <div><br>
                    Kaladhar </div>
                  <br>
                  <fieldset></fieldset>
                  <br>
                </div>
              </div>
              <pre>______________________________________________________________________________
Member info: <a moz-do-not-send="true" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a moz-do-not-send="true" href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a moz-do-not-send="true" href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a>

</pre>
            </blockquote>
            <br>
          </div>
          <br>
______________________________________________________________________________<br>
          Member info: <a moz-do-not-send="true"
            href="https://lists.balabit.hu/mailman/listinfo/syslog-ng"
            target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
          Documentation: <a moz-do-not-send="true"
            href="http://www.balabit.com/support/documentation/?product=syslog-ng"
            target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
          FAQ: <a moz-do-not-send="true"
            href="http://www.balabit.com/wiki/syslog-ng-faq"
            target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
          <br>
          <br>
        </blockquote>
      </div>
      <br>
      <br clear="all">
      <br>
      -- <br>
      Kaladhar <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a>

</pre>
    </blockquote>
    <br>
  </body>
</html>