Syslog-NG - Where Are Syslog Host Names Stored

[muellemr]

I am running Cacti 0.8.7h on Ubuntu with the Syslog plugin on Cacti using Syslog-NG. Everytime I plug in a device on the network, the new host name is added to the "Select Host(s)" table on the left side of Syslog. I change the default name the device has to what I want it to be and add it to etc/hosts with name and IP Address.

Example: I connect a new APC UPS to the network with a management card and it has a default name of APCb2b503 which is added to the "Select Host(s)" in Syslog.

I rename the device to BLDG40UPS01 and then add it to etc/hosts with this name and the IP address I reserved in dhcp

Now I have both names "APCb2b503" and "BLDG40UPS01" showing in the "Select Host(s)" window in Syslog. Looking at the Cacti database, there are no hostnames listed.

My question is - where does Syslog-NG store these hostnames so I can remove those that are not valid?

If you need more information to help me solve this, please let me know and I will provide whatever you need.

Thank You

[webpagetech]

I'm having the same/similar issue. I have some routers that I'm getting log entry's from. The routers have fully qualified domain names via dns and via the /etc/hosts file on the cacti server.

Cacti Version: 0.8.7g, Plugin Architecture Version: 2.8, syslog version: 1.22

my nsswitch.conf and host.conf files are configured to use my hosts file before dns but syslog does not follow this proccess?

Code: Select all

cat /etc/nsswitch.conf
...
hosts:          files dns
...
cat /etc/host.conf 
# The "order" line is only used by old versions of the C library.
order hosts,bind
multi on

In the syslog plugin all my routers show up as invalid_host.
I need to know how this plugin handles host name resolution.


Thanks pete

[muellemr]

Can anyone point me in the right direction of where to look? If you need additional information I am happy to provide it. Jsut let me know what you need.