I would like to ask question about fromhost message properties.
I am using rsyslog 7.4.7 on RHEL 7.3 . However, the fromhost message properties seems to set the hostname in lowercase letters even though uppercase letters are used for hostname in /etc/hosts/
[root@RHEL73-1 log]# cat /etc/hosts 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 10.0.2.12 RHEL73-1 10.0.2.13 RHEL73-test
However, when log from remote log is received fromhost is set as lowercase letters.
Debug line with all properties: FROMHOST: 'rhel73-test', fromhost-ip: '10.0.2.13', HOSTNAME: 'RHEL73-2', PRI: 30, syslogtag 'systemd:', programname: 'systemd', APP-NAME: 'systemd', PROCID: '-', MSGID: '-', TIMESTAMP: 'Nov 13 20:01:01', STRUCTURED-DATA: '-', msg: ' Removed slice user-0.slice.' escaped msg: ' Removed slice user-0.slice.' inputname: imudp rawmsg: '<30>Nov 13 20:01:01 RHEL73-2 systemd: Removed slice user-0.slice.'
Is the resolved hostname set as lowercase or uppercase ? Document seems to not mention about this behavior...