Possible for generated Output to use hostname() rather than hostname_fqdn() for Hostname? about collector-sidecar HOT 3 CLOSED

Hi,
hostname_fqdn() has already a build-in fallback to hostname() when there is no dns name available. That's why we hard wired it into the configuration. So I think the hostname configuration for that particular node is pretty broken. It is providing a dns name that resolves to 'localhost.localdomain'. Is it not possible to setup a proper hostname? This is needed for other services aswell.

from collector-sidecar.

Thanks for the feedback Marius.

You are correct that the host could have done a better job of figuring out its FQDN. I fixed that issue by modifying /etc/nsswitch.conf to query dns before looking in the local /etc/hosts files which is where it was getting the localhost.localdomain name from.

Still, it would be nice to have the option to choose the shortname over the FQDN for the source in Graylog. This would match the shortnames that get pulled from the syslog messages that get pushed into Graylog from our syslog-ng servers.

There is probably a way to massage the FQDN down to a shortname using an extractor but I was hoping to have the option to "fix" it on the sending side.

Thanks again for the reply.

from collector-sidecar.

Closing this for now, I think there will be some improvements when #26 is implemented.

from collector-sidecar.