mdounin at mdounin.ru
Wed Jan 11 13:13:38 UTC 2017
On Tue, Jan 10, 2017 at 03:42:24PM -0500, vegetax wrote:
> Hi need some help I am load balancing my syslog traffic from my WAF device
> ngix server below and the servers in the pool are servers running rsyslog
> currently the issue is when the logs hit the nginx server it re-writes the
> source host name for example below in logs you see "nginx_vm" but you should
> be "WAF01".
> Does any one have any suggestions to have this stop happening
It looks like your rsyslog is configured to log name of the system
it got the message from instead of the hostname from the syslog
message. Check your rsyslog configuration.
More information about the nginx