cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Syslog Hostname is inconsistant

SOLVED
Here to help

Syslog Hostname is inconsistant

We have multiple MX-250 devices on the network and I am using rsyslog to collect my logs.

 

As of now, the hostname in the logs shows as "_gateway".  If I send logs from an Ubuntu host, I get the correct hostname in the log file,but not when the logs come from the MX-250.

 

Our MX-65 shows in the the syslogs with its IP address, as do all the access points.  Where is the "_gateway" name coming from for the MX-250?

 

Is there a place to set this in the configuration screens?

 

This is what the log entry looks like:

2019-01-25T15:38.16986678-5:00 _gateway 1548448.1704225745 ip_flow_end src=...

 

 

Thanks in advance for any ideas.

1 ACCEPTED SOLUTION

Accepted Solutions
Here to help

Re: Syslog Hostname is inconsistant

That is exactly what is happening!  It is the syslog server that is setting the hostname, not the MX-250

 

All I had to do was put an entry in /etc/hosts and restart rsyslog

 

Thank you.

 

-Paul

3 REPLIES 3
Kind of a big deal

Re: Syslog Hostname is inconsistant

If you do an nslookup on the MX250 IP address it doesn't resolve to that name by chance does it?

Kind of a big deal

Re: Syslog Hostname is inconsistant

Any chance the syslog server puts it in there like that because it detects the source is it's own default gateway?

Here to help

Re: Syslog Hostname is inconsistant

That is exactly what is happening!  It is the syslog server that is setting the hostname, not the MX-250

 

All I had to do was put an entry in /etc/hosts and restart rsyslog

 

Thank you.

 

-Paul

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.