[syslog-ng]BUG: Number in Hostnames?
Jonathan
gore@webnet.qc.ca
Mon, 17 Jun 2002 12:05:07 -0400
Hi,
I've been toying a bit with syslog-ng, I'm quite happy so far with all the
possibilities it offer me. But I got a problem getting it to work in my
environment.
I want to log normal syslogd machines to a LogHost which would run
syslog-ng. I've installed syslog-ng 1.5.18 on my LogHost and ran a few
tests.
With this config:
options { sync (0);
time_reopen (10);
log_fifo_size (1000);
long_hostnames (no);
chain_hostnames (no);
use_dns (no);
use_fqdn (no);
create_dirs (no);
keep_hostname (yes);
};
source s_sys { unix-stream ("/dev/log"); internal();
udp (ip(209.71.224.21) port (514)); };
destination mail1 { file("/var/log/mail1"); };
filter filter_mail1 { host("mail1");};
log { source(s_sys); filter(filter_mail1); destination(mail1); };
As you can see, I want to log a host named "mail1" to a file "mail1".
However, it doesn't work. The host send its log entries syslog-ng but
doesn't recognize "mail1".
But, if I change the host("mail1") to host("mail"), it work perfectly. The
hostname in the /var/log/mail1 file is "mail" tho, not "mail1".
I ran syslogd into debug mode on my "mail1" machine. I saw it does send the
logs out with the "mail1" tag.
I tried this with another of my host, its name is nexus1, I experienced the
same behavior.
So, I'm wondering if syslog-ng doesn't like having a number at the end of
the hostname.
The hosts running syslogd are RedHat 7.2 and 7.1.
Any ideas? :) I'd like to get this working, all my hostnames got numbers....
Thanks!
Jonathan.