Adding Source IP to Messages
russeller
I am receiving some logs from network devices that don't include the source IP or host in the log message.
How do I add $MessageSourceAddress to the message so I can identify its source?
I've tried
Exec $raw_event = $raw_event +$MessageSourceAddress;
But that does nothing. What is the correct syntax for this?
