Rewrite

[Maxim Dounin]

Hello!

On Tue, Jan 10, 2017 at 03:42:24PM -0500, vegetax wrote:

> Hi need some help I am load balancing my syslog traffic from my WAF device
> to 
> ngix server below and the servers in the pool are servers running rsyslog
> currently the issue is when the logs hit the nginx server it re-writes the 
> source host name for example below in logs you see "nginx_vm" but you should
> be "WAF01".  
> Does any one have any suggestions to have this stop happening

It looks like your rsyslog is configured to log name of the system 
it got the message from instead of the hostname from the syslog 
message.  Check your rsyslog configuration.

-- 
Maxim Dounin
http://nginx.org/