Hello There,
We are seeing different servers names in the "logsource" field for the same "host".
Please suggest.
Log Source shows different server name in the logs
-
Sampath.Basireddy
- Posts: 252
- Joined: Wed Dec 14, 2016 12:30 pm
Re: Log Source shows different server name in the logs
Can you share some screenshots of examples? It could be a parsing issue or DNS related - let's also have a look at the logstash config found by going to Admin > Global (All Instances) > Global Config > View > All Files Combined.
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
-
Sampath.Basireddy
- Posts: 252
- Joined: Wed Dec 14, 2016 12:30 pm
Re: Log Source shows different server name in the logs
You do not have the required permissions to view the files attached to this post.
Re: Log Source shows different server name in the logs
There are issues parsing the data that is coming in and I think it's due to the multiline config for the syslog input. For multiline inputs, try setting up a tcp input instead - see https://support.nagios.com/kb/article/n ... g-727.html
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.