You are not logged in.

#1 2017-05-30 17:33:12

MilanKnizek
Member
Registered: 2005-12-13
Posts: 88

Receiving remote BSD log to journald via rsyslog: wrong hostname

Hi,

on computer "panther", I would like to store syslog messages from my Mikrotik router. At the moment, Mikrotik sends BSD log to "panther", where rsyslog forwards the messages to journald. However, in journal, the hostname is "panther" instead of "router".

May 30 19:22:53 panther dhcp,info[29863]:  router: dhcp1 assigned 10.11.13.127 to 04:A8:2A:E8:2A:44

where the 'router:' is a prefix defined in Mikrotik to partially work-around the problem with wrong hostname. The Mikrotik's identity is set to "router".

The configuration of rsyslog is:

[root@panther /]# cat /etc/rsyslog.conf
module(load="imudp") # input module for UDP syslog
module(load="omjournal") # output module for journal

input(type="imudp" port="514" ruleset="writeToJournal")

ruleset(name="writeToJournal") {
  action(type="omjournal")
}

Any idea how to force the remote hostname to journald?


--
Milan Knizek
http://knizek.net

Offline

Board footer

Powered by FluxBB