Strange ... IP Address instead of the machine name ....
Hello everyone, I'm centralizing the logs of ten servers in on central one, thanks to syslog-ng, and some syslogd on the servers (which are different OS, like AIX, Solaris, HP UX ...). I use php-syslog as a web interface, and it works great =) But i've noticed that my php-syslog has got one problem : In the 'server' comboBox, i can see some IP address and just a few name, which aren't DNS ones. I'm not sure where my central server has found thoses names ( maybe in the packets send by the clients) but i've checked the file /etc/hosts of this central server. I've written down there the ip addresses (of the comboBox) followed by a 'tab' and then, the name that i want to be displayed .... But nothing to do ... i desn't work like that. So maybe someone can help me :) thanks a lot :=)
fredzy padzy wrote:
Hello everyone,
I'm centralizing the logs of ten servers in on central one, thanks to syslog-ng, and some syslogd on the servers (which are different OS, like AIX, Solaris, HP UX ...).
I use php-syslog as a web interface, and it works great =)
But i've noticed that my php-syslog has got one problem :
In the 'server' comboBox, i can see some IP address and just a few name, which aren't DNS ones.
I'm not sure where my central server has found thoses names ( maybe in the packets send by the clients) but i've checked the file /etc/hosts of this central server.
I've written down there the ip addresses (of the comboBox) followed by a 'tab' and then, the name that i want to be displayed ....
But nothing to do ... i desn't work like that.
So maybe someone can help me :)
thanks a lot :=)
Unfortunately php-syslogng is a 3rd-party product therefore it isn't supported on this list or by BalaBit. Please forward your questions related to pyp-syslogng to the developers of php-syslogng. If you see several hostnames and IP addresses in your logs then verify your syslog-ng configuration, especially those options which are related to DNS/hostname lookups and hostname rewriting. Without the exactr configuration of your central syslog-ng server I'm unable to help. Regards, -- Sandor Geller wildy@balabit.hu
Check the reverse DNS entries for those IPs. I can't tell from your email if you're talking about just A records when you say there's no DNS for those hosts or not, but it's possible that you've got stale entries floating around. Another possibility is the hostname chaining option in syslog-ng's config, passing them along from the clients. - billn On Tue, 10 Jan 2006, fredzy padzy wrote:
Hello everyone,
I'm centralizing the logs of ten servers in on central one, thanks to syslog-ng, and some syslogd on the servers (which are different OS, like AIX, Solaris, HP UX ...).
I use php-syslog as a web interface, and it works great =)
But i've noticed that my php-syslog has got one problem :
In the 'server' comboBox, i can see some IP address and just a few name, which aren't DNS ones.
I'm not sure where my central server has found thoses names ( maybe in the packets send by the clients) but i've checked the file /etc/hosts of this central server.
I've written down there the ip addresses (of the comboBox) followed by a 'tab' and then, the name that i want to be displayed ....
But nothing to do ... i desn't work like that.
So maybe someone can help me :)
thanks a lot :=)
participants (3)
-
Bill Nash
-
fredzy padzy
-
Sandor Geller