22 Nov
2005
22 Nov
'05
5:26 p.m.
On 11/22/05, Alexi Papaleonardos <alexi.papaleonardos@hypermediasystems.com> wrote:
Hi folks.
We have some of our more important hosts reporting our central syslog-ng servers via stunnel. The downside seems to be that only the first "word" (unqualified) of the hostname makes its way to the loghost. Because of an well-intentioned but annoying host naming policy, we have a number of hosts named things like web002.abc and web002.xyz. It would seem that this causes log files to become intermingled.
See http://www.campin.net/syslog-ng/faq.html#hostname - you need to set the option "chain_hostname(no)" and you should be fine using the full hostname.