I have setup logging to a server running Kiwi Sylog. We have 2 firewalls, both configured to send all logs to the Kiwi syslog server.
On the syslog application, one of the firewalls come through with the correct ip/hostname.
The second firewall logs to the application using a HSRP virtual IP configured on a device that sits attached to the firewall.
Any ideas?