[syslog-ng]new macro feature request
Nate Campi
nate@campin.net
Thu, 21 Feb 2002 12:50:05 -0800
I sort logs by hostname, but often the hostname field is wrong, containg
a program name (from some solaris hosts) or a severity level (some
network devices).
Would it be possible to add a macro for the client IP/hostname? Instead of
logging like this:
destination hosts {
file("/var/log/HOSTS/$HOST/$YEAR/$MONTH/$DAY/$FACILITY$YEAR$MONTH$DAY"
owner(root) group(logs) perm(0644) dir_perm(0755) create_dirs(yes)); };
I could log like this:
destination hosts {
file("/var/log/HOSTS/$gethostbyaddr/$YEAR/$MONTH/$DAY/$FACILITY$YEAR$MONTH$DAY"
owner(root) group(logs) perm(0644) dir_perm(0755) create_dirs(yes)); };
This way, /var/log/HOSTS/unixbox gets the log that the host "unixbox" sent
even if the message itself is formatted incorrectly.
Man I wish I knew C and could supply patches. Maybe I'll finally apply
myself to the K&R C book soon and see what I can churn out ;)
--
Nate
"Mac users swear by their Mac, PC users swear at their PC."