Thank you for your response, I just found that there's likely a more elegant solution that requires less configuration. There's an AWS config file that allows the dhcp EC2 instances to "preserve hostname". I'll try that before I try to tackle the template approach. I can provide a link to that AWS guidance if anyone happens to be interested.Thanks again David.
On Wednesday, March 23, 2022, 03:44:14 PM EDT, David Lang <da...@lang.hm> wrote: create a template that has whatever text you want in the hostname field and then use that when sending a message on the receiving side (the relay), you can look at fromhost-ip or fromhost and then use that in a template while relaying it David Lang On Wed, 23 Mar 2022, Chris via rsyslog wrote: > Date: Wed, 23 Mar 2022 18:08:10 +0000 (UTC) > From: Chris via rsyslog <rsyslog@lists.adiscon.com> > To: "rsyslog@lists.adiscon.com" <rsyslog@lists.adiscon.com> > Cc: Chris <uni8...@yahoo.com> > Subject: [rsyslog] Controlling Hostname > > I have several Linux instances in an Amazon VPC. They send UDP 514 to a > singular free tier ubuntu server running rsyslog. > It aggregates all incoming messages and sends them over TLS to a primary log > server running mysql and Loganalyzer on it. > Amazon makes controlling the hostname necessary because most hostnames look > something like ip-10-0-99-199. > I was thinking maybe there was a way I could force the host that is > originating a syslog message send it's message as an "IP address" versus the > hostname. > If that were true, I could likely set any name I wanted in the /etc/hosts on > the primary server and then primary server could just resolve the hostname on > the primary server. Is that possible? If so how would I accomplish that? > Thanks in advance,CB > _______________________________________________ > rsyslog mailing list > https://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
