Change sender domain for syslog messages

[fhk-cwempe]

I configured our new C9800 to send logs to our syslog server.

logging facility local0
logging source-interface GigabitEthernet0 vrf Mgmt-intf
logging host x.x.x.x

As you can see I want to send the messages via the out-of-band management interface.

This workes.

But the hostname (FQDN) in the messages has the wrong name.

It has the name (subdomain) of the Interface that communicates with the access points.

How can I change the domain of the management interface?

My colleague says he can set different hostnames for each interface on his Cisco IronPorts systems.

But we cannot find a similar option on the C9800.

Another strange thing:

We also have a C9800-CL (VM) without a management interface.

For trouble shooting purposes we changed the domain name on this device (ip domain newdomain.com) and rebootet the VM.

The syslog messages still show the old domain!

There seems to be another place where the hostname/domain is stored.

The running-config does not influence this.

Just a thought: Can the real hostname only be changed via the 0-day configuration wizard?

[Scott Fella]

Just out of curiosity, have you validated DNS and or changed the DNS record for that device?  

[fhk-cwempe]

Yes, the DNS records are ok.
I did not change them.

[Scott Fella]

Okay… we’ll I will have to test that out myself. I did not use the day 0 wizard, basically built the controller from the cli.