One of my devices is not showing its hostname in Graylog 3.2.2 but its IP. It is an ASA device that has been configured exactly as all my other cisco ASA that works correctly i.e. showing their hostname rather than IP addresses.
The only difference I can think of is that the device has been configured to send log before the corresponding entry in DNS was added. So for the first few logs coming in for that device the Graylog server was not able to resolve the host.
Now DNS and reverse DNS entries are configured correctly for that host and I have verified that the Graylog server can indeed DNS resolve that host both ways. However the logs front that host still come unresolved
Anyone know a way to force Graylog to resume query DNS for that host? Once a device is known as an IP does it mean that it will always be known as is?
Please note that I only have this problem with this one particular host and I have red the following posts with no clear steering