On Mon, 23 Mar 2009 12:18:57 +0100 "ronny.raudstein" ronny.raudstein@kvinnherad.kommune.no wrote:
This fixed the problem with the counter. And now I get messages in the database, but only from hosts where I haven't registered reverse-DNS. All messages with hostnames instead of IP in "Origin" ends in parsing errors.
Just a thought: Is the origin from the syslog just a hostname or a fully-qualified domain name?
I think maybe logengine is simple-minded enough that it cannot find the corresponding device in the NAV database unless the origin field is an IP address or identical to the full sysname registered in NAV (which would be the reverse DNS lookup of the IP address).