Adding SOURCE_HOSTIP and SOURCE_HOSTNAME to Logevents

View thread

TK_238869

Hi,

I am new to NXLog and I am setting up relay log servers in IP ranges to collect and forward log events from hosts (different OS) with dynamically assigend IP addresses.

While doing so, I figured out that the forwarded log events missing important details about the orginating systems and I like to enrich the log events while receiving (accepting ) them with the following details:

  • hostname as SOURCE_HOSTNAME
  • ipv4 address as SOURCE_HOSTIP

How is the best practice to do so?

Rgds, Thorsten