'Re: [syslog-ng] how to change localhost to hostname'

[prev in list] [next in list] [prev in thread] [next in thread] 

List:       syslog-ng
Subject:    Re: [syslog-ng] how to change localhost to hostname
From:       Marc Wiatrowski <mwia () iglass ! net>
Date:       2008-04-24 15:41:20
Message-ID: 1209051680.7288.139.camel () slug ! iglass ! net
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]

On Thu, 2008-04-24 at 08:14 -0400, D'Souza, Alfred wrote:
> We have a bunch of servers whose applications write error/debug
> messages to 127.0.0.1 port 514. We want syslog-ng on each of the
> servers to forward the messages to a central logging server which also
> forwards the messages to zenoss running on the central logger server.
> The problem with our configuration (which I have copied here) is that
> no matter which server originates the message, they show up on the
> central server as originating from localhost – in both zenoss and in
> the /var/log files We want them to be shown as originating from the
> server that produced the messages. We can add a template on the
> central logger to log the messages as coming form $FROM_HOST, but
> while that solves the problem for the /var/log messages, zenoss still
> shows the messages as coming from  localhost. Please help, we are new
> to using syslog-ng. We are using syslog-ng version 2.0.8 on Red Hat
> Linux.
> 
> 

Do you have loghost defined?  I've seen applications that will send there if defined \
instead of localhost.  Maybe try 

setting loghost to the server's hostname?

[Attachment #5 (text/html)]

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
  <META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
  <META NAME="GENERATOR" CONTENT="GtkHTML/3.16.1">
</HEAD>
<BODY LINK="#0000ff">
<BR>
On Thu, 2008-04-24 at 08:14 -0400, D'Souza, Alfred wrote:
<BLOCKQUOTE TYPE=CITE>
    <FONT SIZE="2"><FONT COLOR="#000000">We have a bunch of servers whose \
applications write error/debug messages to 127.0.0.1 port 514. We want syslog-ng on \
each of the servers to forward the messages to a central logging server which also \
forwards the messages to zenoss running on the central logger server. The problem \
with our configuration (which I have copied here) is that no matter which server \
originates the message, they show up on the central server as originating from \
localhost &#8211; in both zenoss and in the /var/log files We want them to be shown \
as originating from the server that produced the messages. We can add a template on \
the central logger to log the messages as coming form $FROM_HOST, but while that \
solves the problem for the /var/log messages, zenoss still shows the messages as \
coming from &nbsp;localhost. Please help, we are new to using syslog-ng. We are using \
syslog-ng version 2.0.8 on Red Hat Linux.</FONT></FONT><BR>  <BR>
    <FONT SIZE="2"><FONT COLOR="#000000">&nbsp;</FONT></FONT>
</BLOCKQUOTE>
<PRE>

</PRE>
<PRE>
Do you have loghost defined?&nbsp; I've seen applications that will send there if \
defined instead of localhost.&nbsp; Maybe try  </PRE>
setting loghost to the server's hostname?
</BODY>
</HTML>

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.campin.net/syslog-ng/faq.html

[prev in list] [next in list] [prev in thread] [next in thread] 