For the below incoming message of syslog,
<14>Mar 22 11:12:06 RT_FLOW: RT_FLOW_SESSION_CREATE: session created 188.8.131.52/62963->184.108.40.206/443 0x0 junos-https 220.127.116.11/32359->18.104.22.168/443 0x0 source rule 1 N/A N/A 6 1 Trust Untrust 60471 N/A(N/A) ge-0/0/1.0 UNKNOWN UNKNOWN UNKNOWN
syslog-ng successfully adds hostname between timestamp(
Mar 22 11:12:06) and type of message(
But, for the below incoming message of syslog,
<14> Mar 22 11:04:17 22.214.171.124 03362 auth: User 'sup_ogr' logged in from 126.96.36.199 to SSH session
peculiarly, IP address is already existing between timestamp(
Mar 22 11:04:17) & type of message(
syslog-ng is not able to add host name between time stamp and type of message
Configurations used are:
use_dns (yes); &
1) In second case, does syslog message having IP, in compliance with RFC 5424 standards?
2) If yes, then, what configuration is required to set the host name, between time stamp & type of message?