[syslog-ng] Syslog relay tag - Solved

[Gault Stephane]

Probleme solved with:
 
Box1 : keep_hostname(no) / Chain_hostname(yes)
Box2 : keep_hostname(no) / Chain_hostname(yes)
Syslog server: keep_hostname(no) / Chain_hostname(yes)
 
Thanks for the time spent.
 
S.Gault> Date: Fri, 19 Sep 2008 14:48:41 -0700> From: erempel at uvic.ca> To: syslog-ng at lists.balabit.hu> Subject: Re: [syslog-ng] Syslog relay tag> > I will need to see the rest of your config file. Specifically, the "template" that you> are using on all of the systems.> > Gault Stephane wrote:> > Well doesn't work for me here's the detail :> > > > BOX1: 192.168.5.80 : hostname= APP_80> > BOX2: 192.168.5.65 : hostname= APP_65> > Syslog server: 192.168.5.203> > > > config file :> > > > BOX1: APP_80> > > > options {> > chain_hostnames(yes);> > keep_hostname(no)> > long_hostnames(off);> > sync(0);> > stats(43200);> > perm(0640);> > create_dirs(yes);> > use_fqdn(yes);> > };> > > > destination syslog_server { tcp("192.168.5.65" port(514)); };> > > > BOX2: APP_65> > > > options {> > chain_hostnames(yes);> > keep_hostname(yes);> > long_hostnames(off);> > sync(0);> > stats(43200);> > perm(0640);> > create_dirs(yes);> > use_fqdn(yes);> > };> > > > destination syslog_server { tcp("192.168.5.203" port(514)); };> > > > And My syslog server: 203:> > > > options {> > chain_hostnames(yes);> > keep_hostname(yes);> > long_hostnames(off);> > sync(0);> > stats(43200);> > perm(0640);> > create_dirs(yes);> > use_fqdn(yes);> > };> > > > And i get those king of logs when i generate some log on APP_880:> > > > > > Sep 18 12:41:37 App_65 192.168.5.52 - - [18/Sep/2008:12:41:36 +0200] "GET /tutorial4/java/javaOO/lifecycle.html HTTP/1.1" 200 2620> > Sep 18 12:41:37 App_65 192.168.5.52 - - [18/Sep/2008:12:41:36 +0200] "GET /tutorial4/java/javaOO/objectcreation.html HTTP/1.1" 200 8047> > Sep 18 12:41:39 App_65 192.168.5.52 - - [18/Sep/2008:12:41:37 +0200] "GET /tutorial4/java/javaOO/usingobject.html HTTP/1.1" 200 10133> > > > It see the hostname of the relay box and my IP as the generator of the logs, but doesn't indicate de real source of logs : APP_80 ou 192.168.5.80.> > > > Any clue of what an i doing wrong ?> > > > S.Gault> > > > ________________________________> > Discutez sur Messenger où que vous soyez ! Mettez Messenger sur votre mobile !<http://www.messengersurvotremobile.com/>> > > > > -- > Evan Rempel erempel at uvic.ca> Senior Programmer Analyst 250.721.7691> University Systems, University of Victoria> ______________________________________________________________________________> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng> FAQ: http://www.campin.net/syslog-ng/faq.html> 
_________________________________________________________________
Téléphonez gratuitement à tous vos proches avec Windows Live Messenger  !  Téléchargez-le maintenant !
http://www.windowslive.fr/messenger/1.asp
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20080924/8693c49e/attachment.htm