How to make classic syslogd include hostnames in the log entries it sends to remote hosts?
Issue
-
We forward logs from Solaris and RHEL 4, 5 & 6 machines to a central log server appliance. The logs from the RHEL 6 machines (running rsyslog) show up on the central syslog server with their hostnames, but the log entries from the RHEL 4 & 5 (and Solaris) machines don't have hostnames. The following two log entries were seen on the central log server. The first is from a RHEL6 machine and the second is from a RHEL5 one.
Aug 6 16:26:01 srxtokion01 PAM-unixteam[29059]: pam_sm_open_session(service=crond, terminal=cron, user=root, ruser=UNDEF, rhost=UNDEF) Aug 6 15:07:02 176.2.28.38 PAM-unixteam[30825]: pam_sm_close_session(service=crond, terminal=cron, user=root, ruser=UNDEF, rhost=UNDEF)
We'd like to see hostnames on this central server's logs -- for all messages from clients.
Environment
- Red Hat Enterprise Linux 4
- Red Hat Enterprise Linux 5
- Red Hat Enterprise Linux 6
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.