[syslog-ng] About $HOST macro

[Balazs Scheidler]

On Wed, 2008-04-16 at 11:42 +0900, Yu Watanabe wrote:
> Hello,
> 
> I have a question regarding to the $HOST macro in the syslog.conf.
> 
> Which value does the syslog-ng uses for the hostname?
> It seems that there are circumstatnses that it converts the SOURCEIP using
> the /etc/hosts and sometimes it gets the hostname somewhere else.
> 
> I would like to know how does the syslog-ng defines this value.

It can also extract this value from the received syslog data, depending
on the keep_hostname() setting.

-- 
Bazsi