Thanks for the suggestions. Fabien, would you recommend that in a rewrite statement? I'm new to syslog-ng so it's taking me a bit but I'm still playing around with it. György, thanks for the suggestion. We've got hundreds of hosts so maintaining a local file would be a bit of a challenge. Are there any known issues with the EPEL package and normalizing host names? I'm using this option correctly, right? options { ... normalize_hostnames(yes); }; Thanks again, Kay Avila On Thu, Sep 24, 2015 at 10:13 AM, PÁSZTOR György <pasztor@linux.gyakg.u-szeged.hu> wrote:
Hi,
"Kay N. Avila" <kaynavila@gmail.com> írta 2015-09-23 11:26-kor:
I've read through the documentation and have come up empty. What am I missing? Apologies if this has been asked before; I searched the list but couldn't find anything.
My best practice for host value, is to use a static hosts file: In that case you do not have to keep another dns cache in memory, you have control locally and do not depend on an udp based service where you can loose request/reply, etc.
So, I suggest to use: keep-hostname(no); use-dns(persist-only); dns-cache-hosts(/my/local/hosts.file);
Kind regards, György Pásztor ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq