Re: [syslog-ng] syslog-ng premium "$HOST" issue

Hi! On Thu, 2009-07-16 at 20:25 -0700, Arya, Manish Kumar wrote:

Hi,

template("'$HOST'|'$FACILITY'|'$PRIORITY'|'$PROGRAM'|'$MONTH $DAY$ $YEAR $HOUR:$MIN:$SEC'|'$MSGONLY'\n"));

but here in $HOST I am getting name of central syslog server instead of actual host.

While in ver 1.6.5 it appears correct using same template on events coming from 4 collectors.

is there version incompatibility or some bug in ver 3.0.2a

Maybe we can call it version incompatibility. There is an option called keep_hostname. IIRC the default of this option is changed from True to False. If you set it to true, you could get the behavior you want. You should add "keep_hostname(yes);" to the option section.