Logserver creating multiple sessions via FW to AD

[mcapra]

Possible? Sure (see @tacolover101's post).

If you know the hostnames that your IPs resolve to aren't going to change for a particularly long time, you could define them in /etc/hosts. Otherwise, you could let the individual agents (rsyslog, nxlog, etc) be responsible for appending the hostname to the message and stripping it out later on with a filter. Or adding it as an individual field. There's a few options that could be done by modifying the agents themselves.

[james.liew]

Right-o.

I just had a discussion with a colleague on this.

We'll see what we can do with that filter.

[mcapra]

Sure thing! Let us know if you have additional questions.

[james.liew]

Awesome, thanks guys

I'll have to look into this with a colleague

[tmcdonald]

We'll keep this open in case you have further related questions.

[james.liew]

Yup. Got it.

You can close this one out