Submit a ticketCall us

Get a crash course on Network Monitoring delivered right to your inbox
This free 7-day email course provides a primer to the philosophy, theory, and fundamental concepts involved in IT monitoring. Lessons will explain not only how to perform various monitoring tasks, but why and when you should use them. Sign up now.

Home > Success Center > Kiwi Syslog Server > Kiwi Syslog Server Administrator Guide > Registry settings for Kiwi Syslog Server > OriginalAddressStartTag and OriginalAddressEndTag

OriginalAddressStartTag and OriginalAddressEndTag

Table of contents
No headers

Use the Kiwi Syslog Server registry setting OriginalAddressStartTag to override the default start tag for the sender's original address.

Section (32-bit Windows OS) HKEY_LOCAL_MACHINE\SOFTWARE\SolarWinds\Syslogd\Properties
Section (64-bit Windows OS) HKEY_LOCAL_MACHINE\Software\WOW6432Node\SolarWinds\Syslogd\Properties
Value (STRING) OriginalAddressStartTag
Default value Orignial Address=
Type Original Address Start Tag

Use the OriginalAddressEndTag setting to override the default end tag for the sender's original address.

Section (32-bit Windows OS) HKEY_LOCAL_MACHINE\SOFTWARE\SolarWinds\Syslogd\Properties
Section (64-bit Windows OS) HKEY_LOCAL_MACHINE\Software\WOW6432Node\SolarWinds\Syslogd\Properties
Value (STRING) OriginalAddressEndTag
Default value (Space)
Type Original Address End Tag

Normally, the syslog protocol is unable to maintain the original sender's address when forwarding/relaying syslog messages. This is because the sender's address is taken from the received UDP or TCP packet.

Kiwi Syslog solves this problem by placing a tag in the message text that contains the original sender's address. By default, the tag looks like Original Address=192.168.1.1. That is, the "Original Address=" tag, followed by the IP address, followed by a " " (space) delimiter or tag.

These tags are only inserted if the "Retain the original source address of the message" option is checked in the "Forward to another host" action.

The two registry keys above allow you to override the default start and end tags with custom start and end tag values.

For example, when nnn.nnn.nnn.nnn is the originating IP address, the default originating address tags yield the following:

Original Address=nnn.nnn.nnn.nnn

If you change the start tag to <origin> and the end tag to </origin>, the result is:

<origin>nnn.nnn.nnn.nnn</origin>

Last modified
16:39, 2 Mar 2017

Tags

Classifications

Public