remote syslog configuration

[Robert C. Tseng]

Hi,

I need to configure syslog for remote logging in the following way:

device1 --\ /-- collector1
\ /
+-- relay --+
/ device2 --/ \-- collector2

i.e.: all devices send syslog to relay; relay then send identical copies to both collectors

As this point, there is no problem configuring the flow. However, the problem is in the final form of the messages:

On device1 or device2:
"message"
On relay:
: "message"
On collectors:
: "message"

Question: how do I preserve the hostname/ip of the original device along the data flow?

Thanks in advance.

-Robert

[Sandip Ghosh]

You can do as follows

Redirect the syslog from device A and Device B to relay. The redirect the Relay syslog to CollectorA and CollectorB.

DeviceA \ /->CollectorA
\ /
/ Relay DeviceB / \->CollectorB


Sandip

[Robert C. Tseng]

Haven't master the ASCII art :-) Now let me try again, please disregard the dots:

.device1 --\.............. /-- collector1
............\............ /..............
.............+-- relay --+...............
............/.............\..............
.device2 --/...............\-- collector2

Please allow me to emphasize that the problem is not the data flow. The problem is that relay rewrites the part when relaying to collectors. I want to preserve the of the original device.

Thanks.

-Robert