[syslog-ng]Issues with names in syslog-ng

[Nate Campi]

On Mon, Nov 15, 2004 at 09:54:07AM -0800, Shahid Shafi wrote:
> 
> I am using syslog-ng as a syslog server for Cisco Content Switches. I
> receive logs and all fine. The only problem is I receive the syslog
> message but no hostname associated with it. When I move it to syslogd,
> i receive hostnames as well. Here is the quick example.
> 
> NOV 15 02:35:40 1/1 3880 NETMAN-1: TRAP:Authentication:Generated by: 1.1.1.1
> 
> (this is the actual syslog message generated)
> 
> syslog-ng displays as it but syslogd displays it as:
> 
> NOV 15 02:35:40 alpha.beta.com 1/1 3880 NETMAN-1:
> TRAP:Authentication:Generated by: 1.1.1.1

If syslogd is showing a name but syslog-ng is not, then syslog-ng is
probably deciding that "1/1" is your hostname. Try the bad_hostname()
option. There are examples here:

 http://www.campin.net/syslog-ng/solaris-conf.txt
 http://www.campin.net/syslog-ng/expanded-syslog-ng.conf

-- 
Nate

"The existing phrasebooks are inadequate. They are well enough as far as 
they go, but when you fall down and skin your leg they don't tell you 
what to say." - Samuel Clemens