Hi, we are using NXlog to forward syslog messages, which works fine. But we have that strange in the forwarded message: 3.127.197.211 ****2020-10-13 09:58:54,443 message Konfig: Module im_udp Port 514 Host 0.0.0.0 Module om_udp Host dstserver.domain.com Port 514 Exec $raw_event = $MessageSourceAddress + " " + $raw_event; Does anyone know why that happens? Thanks, Thomas