[syslog-ng]syslog entries without hostnames

[David Douthitt]

Balazs Scheidler wrote:
> 
> On Tue, Jun 19, 2001 at 02:56:33PM -0500, David Douthitt wrote:
> > It seems like there are a LOT of these.  Isn't it possible to make
> > some options to handle them?  I was thinking of options, but... what
> > about this?
> 
> you might try to use the chain_hostnames() option.

I was under the impression that with these log entries:

Jun-XX XX:XX:XX folly su: attempted login
Jun-XX XX:XX:XX folly pppd: login successful
Jun-XX XX:XX:XX folly ---mark---
Jun-XX XX:XX:XX last message repeated 5 times

...the resulting logs with chain_hostnames would be:

Jun-XX XX:XX:XX folly folly su: attempted login
Jun-XX XX:XX:XX folly folly pppd: login successful
Jun-XX XX:XX:XX folly folly ---mark---
Jun-XX XX:XX:XX folly last message repeated 5 times

I had a situation where I had to turn chain_hostnames off for this
very reason.  But that was a syslog-ng installation on a firewall that
was relaying syslog entries, so I don't know if this is relevant to
your suggestion or not...