Probleme solved with:
 
Box1 : keep_hostname(no) / Chain_hostname(yes)
Box2 : keep_hostname(no) / Chain_hostname(yes)
Syslog server: keep_hostname(no) / Chain_hostname(yes)
 
Thanks for the time spent.
 
S.Gault

> Date: Fri, 19 Sep 2008 14:48:41 -0700
> From: erempel@uvic.ca
> To: syslog-ng@lists.balabit.hu
> Subject: Re: [syslog-ng] Syslog relay tag
>
> I will need to see the rest of your config file. Specifically, the "template" that you
> are using on all of the systems.
>
> Gault Stephane wrote:
> > Well doesn't work for me here's the detail :
> >
> > BOX1: 192.168.5.80 : hostname= APP_80
> > BOX2: 192.168.5.65 : hostname= APP_65
> > Syslog server: 192.168.5.203
> >
> > config file :
> >
> > BOX1: APP_80
> >
> > options {
> > chain_hostnames(yes);
> > keep_hostname(no)
> > long_hostnames(off);
> > sync(0);
> > stats(43200);
> > perm(0640);
> > create_dirs(yes);
> > use_fqdn(yes);
> > };
> >
> > destination syslog_server { tcp("192.168.5.65" port(514)); };
> >
> > BOX2: APP_65
> >
> > options {
> > chain_hostnames(yes);
> > keep_hostname(yes);
> > long_hostnames(off);
> > sync(0);
> > stats(43200);
> > perm(0640);
> > create_dirs(yes);
> > use_fqdn(yes);
> > };
> >
> > destination syslog_server { tcp("192.168.5.203" port(514)); };
> >
> > And My syslog server: 203:
> >
> > options {
> > chain_hostnames(yes);
> > keep_hostname(yes);
> > long_hostnames(off);
> > sync(0);
> > stats(43200);
> > perm(0640);
> > create_dirs(yes);
> > use_fqdn(yes);
> > };
> >
> > And i get those king of logs when i generate some log on APP_880:
> >
> >
> > Sep 18 12:41:37 App_65 192.168.5.52 - - [18/Sep/2008:12:41:36 +0200] "GET /tutorial4/java/javaOO/lifecycle.html HTTP/1.1" 200 2620
> > Sep 18 12:41:37 App_65 192.168.5.52 - - [18/Sep/2008:12:41:36 +0200] "GET /tutorial4/java/javaOO/objectcreation.html HTTP/1.1" 200 8047
> > Sep 18 12:41:39 App_65 192.168.5.52 - - [18/Sep/2008:12:41:37 +0200] "GET /tutorial4/java/javaOO/usingobject.html HTTP/1.1" 200 10133
> >
> > It see the hostname of the relay box and my IP as the generator of the logs, but doesn't indicate de real source of logs : APP_80 ou 192.168.5.80.
> >
> > Any clue of what an i doing wrong ?
> >
> > S.Gault
> >
> > ________________________________
> > Discutez sur Messenger où que vous soyez ! Mettez Messenger sur votre mobile !<http://www.messengersurvotremobile.com/>
> >
>
>
> --
> Evan Rempel erempel@uvic.ca
> Senior Programmer Analyst 250.721.7691
> University Systems, University of Victoria
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.campin.net/syslog-ng/faq.html
>

---

Votre correspondant a choisi Hotmail et profite d'un stockage quasiment illimité. Créez un compte Hotmail gratuitement !