Also, After looking at the documentation for 2.0, I see an option for: spoof_source I'm a bit confused here since I've always just used keep_hostname and it seems to provide the correct source. What does spoof_source provide that keep_hostname doesn't? Doesn't keep_hostname replace the header with the original source before forwarding it to the central syslog-ng server? On Tue, Feb 2, 2010 at 9:29 AM, Clayton Dukes <cdukes@gmail.com> wrote:
Hey guys, I have a customer that is running v2.09 (with security patches). We need them to forward logs to our syslog-ng server but need to keep the original device as the source name.
I'm assuming this is what they need: keep_hostname(yes); chain_hostnames(no);
Can anyone confirm that v2.09 supports this? Is there anything else needed to accomplish this in v2.09?
-- ______________________________________________________________
Clayton Dukes ______________________________________________________________
-- ______________________________________________________________ Clayton Dukes ______________________________________________________________