[syslog-ng] Syslog relay tag

Gault Stephane hqservers at hotmail.com
Thu Sep 18 11:22:18 CEST 2008


Well doesn't work for me here's the detail :
 
BOX1: 192.168.5.80 : hostname= APP_80
BOX2: 192.168.5.65 : hostname= APP_65
Syslog server: 192.168.5.203
config file :
 
BOX1: APP_80
 
options {        chain_hostnames(yes);        keep_hostname(no)        long_hostnames(off);        sync(0);        stats(43200);        perm(0640);        create_dirs(yes);        use_fqdn(yes);};
 
destination syslog_server { tcp("192.168.5.65" port(514)); };
 
BOX2: APP_65
 
options {        chain_hostnames(yes);        keep_hostname(yes);        long_hostnames(off);        sync(0);
        stats(43200);        perm(0640);        create_dirs(yes);        use_fqdn(yes);};
destination syslog_server { tcp("192.168.5.203" port(514)); };
 
And My syslog server: 203:
 
options {        chain_hostnames(yes);        keep_hostname(yes);        long_hostnames(off);        sync(0);
        stats(43200);        perm(0640);        create_dirs(yes);        use_fqdn(yes);};
 
And i get those king of logs when i generate some log on APP_880:
 
 
Sep 18 12:41:37 App_65 192.168.5.52 - - [18/Sep/2008:12:41:36 +0200] "GET /tutorial4/java/javaOO/lifecycle.html HTTP/1.1" 200 2620Sep 18 12:41:37 App_65 192.168.5.52 - - [18/Sep/2008:12:41:36 +0200] "GET /tutorial4/java/javaOO/objectcreation.html HTTP/1.1" 200 8047Sep 18 12:41:39 App_65 192.168.5.52 - - [18/Sep/2008:12:41:37 +0200] "GET /tutorial4/java/javaOO/usingobject.html HTTP/1.1" 200 10133
It see the hostname of the relay box and my IP as the generator of the logs, but doesn't indicate de real source of logs : APP_80 ou 192.168.5.80.
 
Any clue of what an i doing wrong ?
 
S.Gault
_________________________________________________________________
Téléphonez gratuitement à tous vos proches avec Windows Live Messenger  !  Téléchargez-le maintenant ! 
http://www.windowslive.fr/messenger/1.asp
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20080918/c26ddd40/attachment.htm 


More information about the syslog-ng mailing list