I'm standing up an Rsyslog relay right now and would like to send logs to our NPM instance. I've tested this and logs show up in the Syslogger with the address of the Rsyslog box as the hostname and not the source IP in the logs themselves. Is there a way to set this up so NPM pulls the source address from the message body and uses that?
↧