[syslog-ng] [Bug 171] Unwanted IP adress Folder

[bugzilla at bugzilla.balabit.com]

https://bugzilla.balabit.com/show_bug.cgi?id=171





--- Comment #2 from JG <julien.groselle at gmail.com>  2012-04-02 15:08:02 ---
Hi, 

First, thank you to work on my case.
So to be much more precise, 90% of time, client send hostname, and server tidy client's logs with hostname.
But 10% of time, the server put client's log in the IP address folder.

On client's config i have this option : 
options { long_hostnames(off); flush_lines(0); log_msg_size(8192); stats_freq(0); keep_hostname(yes); };

On server's config :
options { long_hostnames(off); flush_lines(0); keep_hostname(yes); ts_format(iso); log_msg_size(8192); normalize_hostnames(yes); };

So if i understand your answer, my server take the hostname that the client send.
And, if the server put logs in ip address folder, it's because it receive ip address of the client in $hostname$ variable...

So my new question is why syslog-ng client don't send his hostname but it ip address ?

To try to self solved my problem, i will try to put keep_hostname(no) on my server and let the reverse DNS set up $hostname$.

PS : the debug mode... is really verbose :P I have tryed it, and Luckily i had resized my /var/log :)
I'm still parsing informations.


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.