I need some help
So i got a little bored and built an linux machine running Rsyslog and Log analyzer.
Now when i send the remote logs to this device it comes threw like this:
Feb 11 23:14:47 router pptp,ppp,info KnySkippieVpn: authenticated
Take note of that “router” bit there.
now when i then look at it in loganalyzer it comes through like this
you see the host bit there, well i need to change that. is there is way to have the log send through with their Sys ID instead of just saying router and confusing the heck out of me
Fuck
This always happens, i struggle for a while, ask for help and the very next thing i do is figure it out.
Okay, i’m going to explain what i did for others asking this question who stumble onto this.
In the action remote you should see a tag “BSD Syslog”
tag that.
Then all i did was choose syslog from the first menu and info for the second
Edit
Here are some extra links.
If you feel like building a basic syslog server for yourself these are the instructions i used to build mine
http://terraltech.com/syslog-server-with-rsyslog-and-loganalyzer/
http://randomtweaks.blogspot.com/2013/03/mikrotik-remote-logging-using-ubuntu.html