RE: [logs] RE: syslog/tcp (selp)

Previous message: Frank O'Dwyer: "RE: [logs] syslog/tcp (selp)"
In reply to: Darren Reed: "Re: [logs] RE: syslog/tcp (selp)"
Next in thread: Bennett Todd: "Re: [logs] RE: syslog/tcp (selp)"
Next in thread: Kyle R. Hofmann: "Re: [logs] RE: syslog/tcp (selp)"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

andrewat_private

Having the name AND address would be very useful, as long as the name is
fully qualified. This would help when the receiving syslog collector is
not using the same domain as the sending device. Or, in the situation
where we are receiving from many remote networks all set to use the
10.x.x.x range.

>How about name AND address ?  Both have meaning at the time, that can
be
>lost when you try to do analysis later, based on one or the other.
>Darren

_______________________________________________
LogAnalysis mailing list
LogAnalysisat_private
http://lists.shmoo.com/mailman/listinfo/loganalysis