Re: [syslog-ng] how rewrite the HOST macro?

On 8/11/07, mobidyc <mobidyc@gmail.com> wrote:

i've around 300 servers to log, it would be difficult to maintain if all is not coherent.

Why not just make sure that all of the servers have good reverse DNS entries for the IP from which they would source syslog packets, and let "keep_hostname(no); use_dns(yes);" populate $HOST with the DNS lookup results? That will give keep everything coherent and consistent so long as your DNS and/or /etc/hosts have accurate records for all 300 servers. Kevin