Hi Folks,<div>How can I extract a hostname from the message and replace the source ip with that name/ip address?</div><div><br></div><div>Sample message:</div><div>Nov 13 18:11:00 myhostname mymessage: Original Host=192.168.6.3:LOW_THRESHOLD_EVENT - 0 AUTHORIZED sessions</div>
<div><br></div><div>So, I need a rewrite rule(?) to take 192.168.6.3 and replace $HOST with it:</div><div><div>Nov 13 18:11:00 92.168.6.3 mymessage:LOW_THRESHOLD_EVENT - 0 AUTHORIZED sessions</div></div><div><br></div><div>
<br></div><div><br></div><div>______________________________________________________________ <br><br>Clayton Dukes<br>______________________________________________________________<br>
</div>