[syslog-ng]Forwarding unchanged Syslog messages

Hamilton Andrew syslog-ng@lists.balabit.hu
Tue, 19 Aug 2003 09:36:19 -0400


The keep_hostname is a server option really.  If you are receiving messages
on that host than keep_hostname is what you are looking for.  The server on
the other end of your connection,ie 192.168.1.1 needs to be syslog-ng and
have its keep_hostname option set to on.  Turn chain_hostnames off as all
this does is put each hostname that it has passed through on the hostname
chain.  You probably don't want that.

Regards,

Drew

-----Original Message-----
From: Harrie van Arragon [mailto:harrieva@web.de]
Sent: Tuesday, August 19, 2003 9:19 AM
To: syslog-ng@lists.balabit.hu
Subject: [syslog-ng]Forwarding unchanged Syslog messages


Is it possible to forward syslogmessages without modifing the Host and the
messages.

I thought "keep_hostname(yes)"  would solve the problem, but it didn't.

Normaly i use version 1.5.15 shipped with debian, but I tryed 1.5.26 too.

I don't konw if its important, but our syslogserver has a load of 100% the
whole day (not from syslog-ng).


I tryed the following config:

   options { use_fqdn(yes); sync(0); use_dns(yes); chain_hostnames(yes);
keep_hostname(yes); };

   source net { tcp(); udp();};

   destination pc1 { udp(192.168.1.1);};
   destination pc2 { udp(192.168.1.2);};
   destination pc3 { udp(192.168.1.3);};

   log { source(net); destination(pc1);};
   log { source(net); destination(pc2);};
   log { source(net); destination(pc3);};


bye

Harrie

__________________________________________________________________________
Die sicherste Form der Kommunikation: E-Mails verschluesseln, Spam-Filter,
Adressverifizierung, digitale Unterschrift: http://freemail.web.de

_______________________________________________
syslog-ng maillist  -  syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html