Submit a ticketCall us

Get a crash course on Network Monitoring delivered right to your inbox
This free 7-day email course provides a primer to the philosophy, theory, and fundamental concepts involved in IT monitoring. Lessons will explain not only how to perform various monitoring tasks, but why and when you should use them. Sign up now.

Home > Success Center > Network Performance Monitor (NPM) > Syslog hostname is not shown

Syslog hostname is not shown

Created by Malik Haider, last modified by Rodim Suarez on Jun 26, 2016

Views: 264 Votes: 0 Revisions: 7

Overview

The syslog summary view, the hostname is not shown even when the group is specified hostname.

However, interface name is showing when syslog summary is selected. 

Environment

All NPM versions

Cause 

Syslog Service is unable to resolve the DNS.

This also because the interface/ip address that is sending the syslog message is not the same as the interface/ip address of the node that was discovered in Orion.

Resolution

When a Syslog message comes in, NPM will try to resolve the source IP address using the methods available: Hosts file, DNS query, LMHosts, NetBios query. If NPM does not succeed in resolving the source IP address using any of the methods, it will keep showing the IP Address for the Hostname. Make sure that your DNS has set up PTR records so it can do reverse lookup and find a name for the IP address. 

Make sure that the interface/ip address that is sending the syslog message is the same as the interface/ip address of the node that was discovered in Orion. 

 

Open command Prompt on Orion Server and do an NSLOOKUP.
Enter the IP address in question.
It will let you know if it can be resolved or not.

You could add in the hosts file if it is really stuck. 

http://www.howtogeek.com/howto/27350...ur-hosts-file/


You should be able resolve the DNS.
Use a regular DNS lookup.
Dns cache on the Server
Hosts file
Lookup on Dns Server
No answer  = Ip address Im pretty sure this should be immediate

 

Note: If you change the ip address of the node in Orion to the ip address that is sending the messages, the hostname will fill in correctly.
Devices that send syslog messages usually have many ip addresses. Unfortunately, Orion only knows about 1 of them, the one it discovered the device with.

 

Last modified
17:47, 26 Jun 2016

Tags

Classifications

Public