Hi,
I have a Linux based application server that exists in two copies on xhostA and xhostB.
I am getting their syslog output via a localhost syslog interface into the UF which is installed on those hosts.
I do not want to push individual inputs.conf files. So how to I get the appropriate host name for the syslog input?
If I leave host emtpy, I get 127.0.0.1 which is not helpful. When I set the hostname, it then is identical for both systems.
[udp://127.0.0.1:8514]
connection_host = 127.0.0.1
sourcetype=linux_secure
no_appending_timestamp = true
index= xauth
Any ideas on how to rectify this easily?
I assume that
host=$decideOnStartup
would just deliver 127.0.0.1 as leaving host empty results in this.
thx
afx
Ok, to answer my own question...
In contrast to what I assumed, $decideOnStartup is resolved to the real hostname and not the referenced address of the input like the default for host.
Ok, to answer my own question...
In contrast to what I assumed, $decideOnStartup is resolved to the real hostname and not the referenced address of the input like the default for host.