[syslog-ng] logging remote server by IP address

noir911 · 02-10-2008, 10:17 PM

I am logging some remote server with syslog-ng. However, the log files are coming as /var/log/ip-address and not /var/log/host-name. Is there's anything I can do to change this? I have the following in my syslogng.conf file -

long_hostnames (off);
use_dns (no);
use_fqdn (no);
create_dirs (no);
keep_hostname (yes);

Thanks for any help.

acid_kewpie · 02-11-2008, 02:51 PM

you want to use the resolved dns name instead of the ip address? reckon that that "use_dns(no)" option might have something to do with that? ;-) note of course that you do need dns working, syslog doesn't have any implicit notion of hostnames within the protocol.

noir911 · 02-11-2008, 06:15 PM

Thanks! That helped.

Another question: if it fails to resolve the hostname of a client, will it log by ip address or will it not log that client at all?

Thanka, again.

acid_kewpie · 02-12-2008, 03:25 AM

oh it'll always log one way or another...

Majed17 · 06-22-2018, 08:01 AM

I had a problem that host would appear as named: ":" and the only thing that solved that was:
drum roll...
conf t
service sequence-numbers
(cisco)