I've noticed something peculiar in my log server setup, and I'm hoping to understand why it's happening. When I receive logs from a specific client machine, I see two different hostnames in the logs in logserver machine:
syslog_hostname: ansible-hcl-controllerreceived_from_hostname: 10-157-182-6.es-si-os-ohn-42.eecloud.nsn-net.net
I'm a bit confused because this is the same machine, yet it's showing up with two different hostnames in my logs. The actual hostname of the machine is ansible-hcl-controller, but I'm also getting the received_from_hostname entry.
What adds to the complexity is that attempting to resolve ansible-hcl-controller to an IP address through DNS resolution fails. However, resolving the received_from_hostname (10-157-182-6.es-si-os-ohn-42.eecloud.nsn-net.net) successfully maps to the accurate IP address (10.157.182.6) that I use to access the client machine.
For further context, here's an example of the log entry I'm seeing on logserver machine:
{
"syslog_hostname": "ansible-hcl-controller",
"received_from_hostname": "10-157-182-6.es-si-os-ohn-42.eecloud.nsn-net.net",
// Other log details...
}
I'd like to understand why I'm getting two different hostnames for the same machine and what might be causing this. It's a bit confusing, and I want to make sure I have a clear picture of what's going on. Any explanations or insights would be greatly appreciated!
