[syslog-ng] Hosts before DNS

[Oleg]

I am using the latest version of ose ng, and have an issue I am trying to
resolve.  We have hosts that resolve to multiple names via round robin
dns.  So ng is capturing logs from all of those, depending on how it was
resolved during during the connection.  For those types of hosts, I would
like to configure ng to use hosts first, and fall back to dns resolution.
 Tried different combinations of configs, but it does not work this way.
It either uses the hosts, or it does dns lookup.  Thanks in advance for any
tips on resolving this.

Example:
10.0.0.1 resolve to www, app1, ftp
I want to call it webserver in /etc/hosts, and if the entry matches, ng
would just use that name.
right now it creates 3 separate log files for the same host based on the
name it's able to resolve at lookup.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20180813/373699c2/attachment.html>