MonitorWare Knowledge Base

[mediastream]

As far as I know this is not possible, but I thought I'd ask.

We send our syslogs to a central Rsyslog server who then filters and forwards messages to other destinations. We are using the default "hostname" property to designate the source, but we really want to be able to send the original source's IP to the next destination.It is well documented that if you use "fromhost-ip" it gives the IP address of the last upstream hop and not the IP of the original source. Is it at all possible to forward the original IP of the source in a relay?

Thanks!

[rgerhards]

Well, the only thing you could do is add the IP to the forwarded message's text. Then, you would need to extract it on the receiving side. this can be done with templates.