hi! i replaced syslogd on our master logserver with syslog-ng, because syslogd wasn't able to handle all the incoming syslog messages (receive queue was permanent around 65500 bytes, dropped 50-90% of the incoming messages). syslog-ng now works like a charm, there's only one cosmetic flaw: every hostname in the logfile is twice, seperated by a slash, like: Aug 24 15:50:34 baby.inode.at/baby.inode.at 2961721: 13w6d: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/1:13, changed state to up the sending sysloggers are syslogds, ciscos, zyxels, etc. so (at least IMHO) its not a config setting on the remote syslogger how can i prevent syslogd from double-printing the hostnames? relevant syslog-ng.conf snippet is here: --- options { sync (0); log_fifo_size (1000); use_fqdn (yes); }; --- greetz Michael Renner Inode Internet - Junior System Engineer
Aug 24 15:50:34 baby.inode.at/baby.inode.at 2961721: 13w6d: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/1:13, changed state to up
the sending sysloggers are syslogds, ciscos, zyxels, etc. so (at least IMHO) its not a config setting on the remote syslogger
how can i prevent syslogd from double-printing the hostnames? relevant syslog-ng.conf snippet is here:
---
options { sync (0); log_fifo_size (1000); use_fqdn (yes); };
chain_hostnames(no) will do the trick. -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
participants (2)
-
Balazs Scheidler
-
Michael Renner