Use the IP address as part of the filename. Sources can fake the hostname.

2021-07-22 12:43:02 +02:00 · 2021-07-22 12:43:02 +02:00 · c24d8af806
parent 6aeb9b1e5b
commit c24d8af806
1 changed files with 1 additions and 1 deletions
--- a/templates/rsyslog-remote-socket.conf.j2
+++ b/templates/rsyslog-remote-socket.conf.j2
@ -17,7 +17,7 @@ tls.myPrivKey="{{ rsyslog_tls_key }}"
 tls="off" 
 {% endif %}
 )
-template (name="remote" type="string" string="{{ rsyslog_remote_path }}/%HOSTNAME%/%HOSTNAME%-syslog.log")
+template (name="remote" type="string" string="{{ rsyslog_remote_path }}/%HOSTNAME%/%fromhost-ip%_syslog.log")
 ruleset (name="relp") { action(type="omfile" DynaFile="remote") }
 {% endif %}