loghost question

[dandan123]

On some of our servers I see loghost next to localhost, like this -

127.0.0.1 localhost loghost

while in others it's next to the hostname entry

xxx.xxx.xxx.xxx hostname loghost

Can someone explain what the difference is ?

I'm referring to the /etc/hosts file.

 

[coffeysm]

Loghost is just an alias in the syslog.conf file that says where to send the logs. I was told that you should put it under the IP Address, but I usually keep it under 127.0.0.1 address anyway. You would specify loghost if you send your syslog messages to another server. The only time it is a problem is if loghost is not in the /etc/hosts.