option use_dns & use_fqdn problem with syslog-ng tcp connection t o syslog-ng?
syslog-ng 1.5.18 with libol 0.3.3 on RedHat 7.3 i386 EXCERPTS FROM syslog-ng.conf options { long_hostnames (on); use_dns (yes); use_fqdn (yes); keep_hostname (no); }; destination d_files { file("/var/log/syslog-ng/$HOST/$FACILITY.$LEVEL" template("$ISODATE $HOST $FACILITY $PRIORITY $PROCESS $MSG\n")); }; For network nodes using OLD syslog daeomons that send using UDP (solaris, HP-UX, Linux etc...) The $HOST value is the FQDN as defined in in DNS reverse lookup. However if I have syslog-ng on a remote box and it uses a TCP connection to my central syslog receiver then the hostname is missing the domain? I have lots of servers named "dns1" or "www" so this becomes a problem. Am I missing an option somewhere? Thanks, -Ben.
On Fri, Jun 14, 2002 at 10:38:27AM -0400, Russo, Ben wrote:
For network nodes using OLD syslog daeomons that send using UDP (solaris, HP-UX, Linux etc...) The $HOST value is the FQDN as defined in in DNS reverse lookup.
However if I have syslog-ng on a remote box and it uses a TCP connection to my central syslog receiver then the hostname is missing the domain?
Since you're using macros, use the $HOST_FROM macro newly introduced. It uses gethostbyaddr() so you should get the FQDN you want no matter what's in your options{} settings. I'm not sure why you're seeing this behavior though. -- Got a light? Typical unix response: Got: No match.
On Fri, Jun 14, 2002 at 08:54:18AM -0700, Nate Campi wrote:
On Fri, Jun 14, 2002 at 10:38:27AM -0400, Russo, Ben wrote:
For network nodes using OLD syslog daeomons that send using UDP (solaris, HP-UX, Linux etc...) The $HOST value is the FQDN as defined in in DNS reverse lookup.
However if I have syslog-ng on a remote box and it uses a TCP connection to my central syslog receiver then the hostname is missing the domain?
Since you're using macros, use the $HOST_FROM macro newly introduced. It uses gethostbyaddr() so you should get the FQDN you want no matter what's in your options{} settings.
FYI: Looking at the source I see, #define M_FULLHOST_FROM 38 #define M_HOST_FROM 39 So you may need to use FULLHOST_FROM to get the FQDN. -- Cahn's Axiom: When all else fails, read the instructions.
participants (2)
-
Nate Campi
-
Russo, Ben