Logger "Device" field not resolving
We have 2 syslog connectors installed - each on it's own WIndows 2012 host, each in forwarding mode, forwarding events from various remote hosts. Working reasonably well so far.
I notice on the Logger when looking at the event flow, one of these Windows hosts is showing up in the Logger "Device" field as a FQDN. The other Windows host is the IP address (not resolved).
Both hosts are properly configured in DNS (caveat - one was not, but was fixed early today. Flushing the DNS cache from the O/S on the various hosts and then tunning nslookup works everywhere - the IP address can be resolved on the source devices, syslog connector hosts, Logger, etc.
I have to assume that the Logger "Device" field data is being cached? Do I need to restart Logger network services, or Logger itself to clear this? Making me a bit crazy today.
As always, any sanity checks are appreciated....