Re: Logserver creating multiple sessions via FW to AD
Posted: Tue Apr 11, 2017 10:18 am
Possible? Sure (see @tacolover101's post).
If you know the hostnames that your IPs resolve to aren't going to change for a particularly long time, you could define them in /etc/hosts. Otherwise, you could let the individual agents (rsyslog, nxlog, etc) be responsible for appending the hostname to the message and stripping it out later on with a filter. Or adding it as an individual field. There's a few options that could be done by modifying the agents themselves.
If you know the hostnames that your IPs resolve to aren't going to change for a particularly long time, you could define them in /etc/hosts. Otherwise, you could let the individual agents (rsyslog, nxlog, etc) be responsible for appending the hostname to the message and stripping it out later on with a filter. Or adding it as an individual field. There's a few options that could be done by modifying the agents themselves.
