[syslog-ng] Removal of forwarder hostname ??

[krishna y]

Hi,

I have configured the Syslog-ng in HPUX and forwarding the messages to Ciscoworks
The original message to Syslog-NG is as following:

Jan 20 12:44:32 SYSNG.it.net CiscoDev01 7366: Jan 20 12:44:31.526 GMT: %SYS-5-CONFIG_I: Configured from 192.168.100.10 by snmp

While forwarding to other syslog server, Syslog-NG is adding it's own host name to the message and sending as below:

Jan 20 12:44:32 SYSNG.it.net CiscoDev01 7366: Jan 20 12:44:31.526 GMT: %SYS-5-CONFIG_I: Configured from 192.168.100.10 by snmp

(Note:SYSNG.it.net = HostName of Syslog-ng server, CiscoDev01=Device hostName)

The final syslog Server(Ciscoworks) is not treating the message is as from the CiscoDev01.There's no use of running script in Ciscoworks box to remove the entry of SYSNG.it.net. It has to be done before receiving the message

How to avoid this at Syslog-NG level? Tried the following options, but no luck:
keep_hostname(yes);
chain_hostnames(no);
long_hostnames(no);

Please let me know the procedure not to append the hostname of the Syslog-NG to the message.


Thanks in advance,
Krishna Y

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20060121/230642ac/attachment.html