[syslog-ng]Problem in host() filter
Salim Pathan
syslog-ng@lists.balabit.hu
Mon, 16 Feb 2004 16:01:42 +0530
This is a multi-part message in MIME format.
------=_NextPart_000_0005_01C3F4A6.2B98D290
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
hi,
i'm working on a project based on syslog-ng since last one year...i'm =
using "host()" filter function to separate logs coming from different =
hosts...
"use_dns()" option is set to "NO",which means the incoming logs will be =
filtered based on IP address in place of hostname....now the problem is=20
that syslog-ng is unable to separate logs coming from host IP "31.2.2.5" =
and "31.2.2.51".....
how can i separate logs from hosts having similar IP addresses, as in =
above case?
thanks,
salim.
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.581 / Virus Database: 368 - Release Date: 2/9/2004
------=_NextPart_000_0005_01C3F4A6.2B98D290
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#c2d1e7>
<DIV><FONT face=3DArial size=3D2>hi,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>i'm working on a project based=20
on syslog-ng since last one year...i'm using "host()" filter =
function to=20
separate logs coming from different hosts...</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>"use_dns()" option is set to "NO",which =
means the incoming logs will be filtered based on IP address in =
place of=20
hostname....now the problem is </FONT></DIV>
<DIV><FONT face=3DArial size=3D2>that syslog-ng is unable to separate =
logs coming=20
from host IP "31.2.2.5" and "31.2.2.51".....</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>how can i separate logs from hosts =
having similar=20
IP addresses, as in above case?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>thanks,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>salim.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV> </DIV>
<DIV><FONT face=3DArial size=3D2><BR>---<BR>Outgoing mail is certified =
Virus=20
Free.<BR>Checked by AVG anti-virus system (<A=20
href=3D"http://www.grisoft.com">http://www.grisoft.com</A>).<BR>Version: =
6.0.581 /=20
Virus Database: 368 - Release Date: 2/9/2004</FONT></DIV></BODY></HTML>
------=_NextPart_000_0005_01C3F4A6.2B98D290--