2007/8/12, K K <kkadow@xxx.com>:
There is one way -- you can override them locally on the server runnign syslog-ng, so your log server believes the reverse DNS for all those aliases all actually resolve to "server0".
You can do this with /etc/hosts if your resolver will check /etc/hosts for reverse DNS (e.g. with a flag in /etc/resolv.conf, but the exact mechanism is OS-dependent).
i will lost all the dynamic part with it but it's a solution.
Sounds like it would be easier to hack the syslog-ng source code to find where it translates IP addresses to names, and just add code to check if the last two characters are 'e' followed by a number, and if so, truncate.
i think it would be the best solution, i've really few knowledge in C but i'm going to try. thanks for you help ;) -- Mobidyc