17 Sep
2008
17 Sep
'08
5:38 p.m.
concatenate wrote:
On Wed, Sep 17, 2008 at 9:07 AM, Evan Rempel <erempel@uvic.ca> wrote:
You will need to enable the keep_hostname(yes) for BOTH the relay box and the syslog server.
I woudn't say "need" to. In fact I'd recommend keep_hostname(no) and long_hostnames(off) for the relay box, then keep_hostname(yes) and still long_hostnames(off) for the final syslog server. It's not always a good idea to keep the hostname as sent by the initial syslog client, so in fact "need" is wrong IMHO.
Thanks for the clearification. I was thinking of a "keep hostnames" or not kind of architecture and had not really thought about *where* I needed the specific feature. Evan.