Re: [syslog-ng] About $HOST macro

On Wed, 2008-04-16 at 11:42 +0900, Yu Watanabe wrote:

Hello,

I have a question regarding to the $HOST macro in the syslog.conf.

Which value does the syslog-ng uses for the hostname? It seems that there are circumstatnses that it converts the SOURCEIP using the /etc/hosts and sometimes it gets the hostname somewhere else.

I would like to know how does the syslog-ng defines this value.

It can also extract this value from the received syslog data, depending on the keep_hostname() setting. -- Bazsi