Subject: Re: bug#720: New rsyslog logs '[localhost]' instead of the real hostname

From: Klaus Ethgen <[email-masked]>
Date: Thu, 20 Oct 2022 13:22:31 +0100

Hi Mark,

Am Do den 20. Okt 2022 um 13:00 schrieb Mark Hindley:
> On Thu, Oct 20, 2022 at 11:48:57AM +0100, Klaus Ethgen wrote:
> > Package: rsyslog
> > Version: 8.2210.0-1devuan1
> > Severity: normal
> > 
> > Since rsyslog update today from 8.2208.0-1devuan1 to 8.2210.0-1devuan1,
> > all log entries do not log the hostname anymore but instead using
> > '[localhost]' (literally).
> 
> Was this logged as 'localhost' before the update?

No, it was logged as the real hostname (for example 'ikki')

> Reading the upstream changelog, I am unclear what has changed and if it is
> intentional.

I had found one that seems to be the source. [0]

> > -- Configuration Files:
> > /etc/logcheck/ignore.d.server/rsyslog [Errno 13] Permission denied: '/etc/logcheck/ignore.d.server/rsyslog'
> 
> Can you check the perms on this file? Why is there an error? It should be world
> readable (644).
> 
> But it may be unrelated...

This is unrelated but te directory above is not readable for other than
logcheck.

Regards
   Klaus
-- 
Klaus Ethgen                                       http://www.ethgen.ch/
pub  4096R/4E20AF1C 2011-05-16            Klaus Ethgen <[email-masked]>
Fingerprint: 85D4 CA42 952C 949B 1753  62B3 79D0 B06F 4E20 AF1C