[syslog-ng]Syslog Chaining doesn't work as expected

Gregor Binder gbinder@sysfive.com
Fri, 23 Mar 2001 12:31:30 +0100


Wiktor Wodecki on Fri, Mar 23, 2001 at 12:04:38PM +0100:

Wiktor,

> I've got a problem with chaining syslog messages. Basically I try to
> forward syslog messages via a host to our loggingserver, but the
> loggingserver doesn't get that's it's from an other host and not the

depending on how your systems are configured, you might get good
results with turning keep_hostname on if that's an option.

> same name but with different fqdn's I can't use that. Since I've turned
> on logn_hostnames and use_fqdn I'm a bit curious what to do. Is this a
> bug or did I miss an option in the docs? All hosts are in /etc/hosts on
> the Loggingserver and all three machines use current stable release
> 1.4.11.

- Is your resolver configured properly? (nsswitch.conf) or
- Do you use FQDNs in /etc/hosts?
- What syslog-ng options are you using on the GATESERVER?

Cheers,

-- 
Gregor Binder       <gregor.binder@sysfive.com>      http://sysfive.com/
sysfive.com GmbH               UNIX. Networking. Security. Applications.
PGP id: 0x20C6DA55 fp: 18AB 2DD0 F8FA D710 1EDC A97A B128 01C0 20C6 DA55