Page 1 of 1
Log Source shows different server name in the logs
Posted: Fri Apr 05, 2019 1:41 pm
by Sampath.Basireddy
Hello There,
We are seeing different servers names in the "logsource" field for the same "host".
Please suggest.
Re: Log Source shows different server name in the logs
Posted: Fri Apr 05, 2019 2:32 pm
by cdienger
Can you share some screenshots of examples? It could be a parsing issue or DNS related - let's also have a look at the logstash config found by going to Admin > Global (All Instances) > Global Config > View > All Files Combined.
Re: Log Source shows different server name in the logs
Posted: Fri Apr 05, 2019 3:08 pm
by Sampath.Basireddy
Hello
@cdienger
Sent you the screenshots via PM and attaching the Global config here.
Re: Log Source shows different server name in the logs
Posted: Fri Apr 05, 2019 3:44 pm
by cdienger
There are issues parsing the data that is coming in and I think it's due to the multiline config for the syslog input. For multiline inputs, try setting up a tcp input instead - see
https://support.nagios.com/kb/article/n ... g-727.html