Issue

• We forward logs from Solaris and RHEL 4, 5 & 6 machines to a central log server appliance. The logs from the RHEL 6 machines (running rsyslog) show up on the central syslog server with their hostnames, but the log entries from the RHEL 4 & 5 (and Solaris) machines don't have hostnames. The following two log entries were seen on the central log server. The first is from a RHEL6 machine and the second is from a RHEL5 one.

  Aug 6 16:26:01 srxtokion01 PAM-unixteam[29059]: pam_sm_open_session(service=crond, terminal=cron, user=root, ruser=UNDEF, rhost=UNDEF)
  Aug 6 15:07:02 176.2.28.38 PAM-unixteam[30825]: pam_sm_close_session(service=crond, terminal=cron, user=root, ruser=UNDEF, rhost=UNDEF)
  

We'd like to see hostnames on this central server's logs -- for all messages from clients.