On 11/22/05, Alexi Papaleonardos <alexi.papaleonardos@hypermediasystems.com> wrote:
Hi folks.

We have some of our more important hosts reporting our central syslog-ng
servers via stunnel.  The downside seems to be that only the first
"word" (unqualified) of the hostname makes its way to the loghost.
Because of an well-intentioned but annoying host naming policy, we have
a number of hosts named things like web002.abc and web002.xyz.  It would
seem that this causes log files to become intermingled.

See http://www.campin.net/syslog-ng/faq.html#hostname - you need to set the option "chain_hostname(no)" and you should be fine using the full hostname.