[syslog-ng] "above message repeats"

[Balazs Scheidler]

On Tue, 2005-05-10 at 10:12 -0600, Andrew Morris wrote:
> One of the messages I'm getting (I'm sorting messages by hostname) is 
> the "above message repeats n times" message, but syslog-ng is logging 
> this under the host "above".  Shouldn't syslog-ng decide what the 
> hostname is by the ip address it is connected from?  eg: host A 
> connects, syslog-ng looks up the host by it's connecting ip address and 
> uses that name resolution as the $HOST variable?  (Note, in this case 
> all hosts are in a local hosts file)
> 
> So, why would it ever write to the file "above"?

there is a separate macro for that, $HOST is the value as received in
the original log message. always using the sender IP's resolved value
would not be good for others using log relays.

So try using $HOST_FROM or $FULLHOST_FROM


-- 
Bazsi