MonitorWare Knowledge Base

Hello,
I configured the sidewinder to send syslog to winsyslog as described in http://www.monitorware.com/en/syslog-en ... winder.php,
However, the syslog message sent from sidewinder does NOT contain the hostname field in its HEADER part of the packet, as result, the winsyslog takes the first word of the MSG part of the packet as the sender device.
My question here is if there is a way to configure winsyslog to read sender information from the packet but not simply take the word after the timestamp as the hostname.
Any help would be great appreciated.

hi,

it is possible to workaround such formatting issues using the PostProcess Action. I would need to see some sample syslog messages first.

We have another article to solve such issues for solaris 8/9, where we had a simular problem, this might help you:
http://www.winsyslog.com/Common/en/faq/ ... essing.php

best regards,
Andre Lorbach

Thanks for your reply, the issue is solved by reconfiguring the syslog listener, there is a check box that tells winsyslog whether or not to take the hostname from syslog message.