So it would consider "Server" to be a bad hostname but what will it do with it ? I'm not sure I understand this option 100%. If I set "keep_hostname" to "yes" but then tell it that "Server" is a bad hostname what will it use as a hostname in this case ? On Fri, Sep 3, 2010 at 12:32 AM, Sandor Geller < Sandor.Geller@morganstanley.com> wrote:
Hi,
On Fri, Sep 3, 2010 at 12:39 AM, stucky <stucky101@gmail.com> wrote:
That's exactly the problem. I cannot keep a hostname that was never written in the first place. The DELL server administrator doesn't send it. As per my email below it sends this :
Aug 16 21:47:22 Server Administrator: Storage Service EventID: 2242> The Patrol Read has started.: Controller 0 (PERC 5/i Integrated)
So If I do a "keep_hostname" syslog-ng assumes that the server is called "Server" which is of course wrong.
For the legacy syslog format bad_hostname("^Server$") should do the trick.
Regards,
Sandor
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html
-- stucky