fromhost

Reports the hostname of the system from which the message was received.

This property belongs to the Message Properties group.

Name:

fromhost

Category:

Message Properties

Type:

string

Description

Hostname of the system the message was received from (in a relay chain, this is the system immediately in front of us and not necessarily the original sender). This is a DNS-resolved name, except if that is not possible or DNS resolution has been disabled. Reverse lookup results are cached; see Reverse DNS caching for controlling cache timeout. Forward lookups for outbound connections are not cached by rsyslog and are resolved via the system resolver whenever a connection is made.

Case handling is input-specific. Some network inputs normalize the resolved name to lowercase for backward compatibility, while others preserve the DNS result by default. For inputs that support it, use the module or input PreserveCase parameter to choose the behavior: imudp PreserveCase defaults to lowercase output and imtcp PreserveCase defaults to preserving case.

Usage

template(name="example" type="list") {
    property(name="fromhost")
}

See also

See rsyslog Properties for the category overview.


Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2026 Rainer Gerhards and others. Licensed under the Apache License 2.0.