[syslog-ng] syslog-ng premium "$HOST" issue

[SZALAY Attila]

Hi!

On Thu, 2009-07-16 at 20:25 -0700, Arya, Manish Kumar wrote:
> Hi,
> 

> template("'$HOST'|'$FACILITY'|'$PRIORITY'|'$PROGRAM'|'$MONTH $DAY$ $YEAR $HOUR:$MIN:$SEC'|'$MSGONLY'\n"));
>    
> but here in $HOST I am getting name of central syslog server instead of actual host.
> 
> While in ver 1.6.5 it appears correct using same template on events coming from 4 collectors.
> 
> is there version incompatibility or some bug in ver 3.0.2a

Maybe we can call it version incompatibility. There is an option called
keep_hostname. IIRC the default of this option is changed from True to
False. If you set it to true, you could get the behavior you want.

You should add "keep_hostname(yes);" to the option section.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 1937 bytes
Desc: not available
Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20090717/dece4ba7/attachment-0001.bin