Only at config parse time.
Regarding the back tick case, are you sure HOSTNAME is set for the syslog-ng process itself? Or is it only set for your interactive shell.
On Linux you can check this in proc, /proc/<pid>/env, but I guess similar exists on freebsd.
> @module confgen context(rewrite) name(r_myself) exec("/bin/hostname")I guess the only remaining question on this is a performance one.
Would the exec be done for each and every log message or is it done only once?
____________________________________________________________ __________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/? product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq