I am trying to get several Cisco swtches to log remotely to rsyslog.
The logging works fine but rsyslog insists the hostname is the source IP
address. I had the network guy set the device-id to the name of the
switch but rsyslogs still thinks HOSTNAME is the IP address.
The specific configuration is:
template (name="NwDevLog" type="string"
string="/var/log/network/%HOSTNAME%/messages.log")
if $syslogfacility-text == 'local5' then ?NwDevLog
if $syslogfacility-text == 'local5' then stop
I finally "fixed" it by adding the IP and host name to /etc/hosts on the
syslogger but that seem like a workaround.
Where does rsyslog get the hostname from?
--
Do not become so fixated on the cheese at the end of the maze that you
forget the real goal is to escape from the lab.
Stephen
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
The logging works fine but rsyslog insists the hostname is the source IP
address. I had the network guy set the device-id to the name of the
switch but rsyslogs still thinks HOSTNAME is the IP address.
The specific configuration is:
template (name="NwDevLog" type="string"
string="/var/log/network/%HOSTNAME%/messages.log")
if $syslogfacility-text == 'local5' then ?NwDevLog
if $syslogfacility-text == 'local5' then stop
I finally "fixed" it by adding the IP and host name to /etc/hosts on the
syslogger but that seem like a workaround.
Where does rsyslog get the hostname from?
--
Do not become so fixated on the cheese at the end of the maze that you
forget the real goal is to escape from the lab.
Stephen
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.