[syslog-ng] how rewrite the HOST macro?

[K K]

On 8/11/07, mobidyc <mobidyc at gmail.com> wrote:
> i've around 300 servers to log, it would be difficult to maintain if all
> is not coherent.

Why not just make sure that all of the servers have good reverse DNS
entries for the IP from which they would source syslog packets, and
let  "keep_hostname(no); use_dns(yes);" populate $HOST with the DNS
lookup results?

That will give keep everything coherent and consistent so long as your
DNS and/or /etc/hosts have accurate records for all 300 servers.

Kevin