Adding Source IP to Messages


#1 russeller

I am receiving some logs from network devices that don't include the source IP or host in the log message. 

How do I add $MessageSourceAddress to the message so I can identify its source?

I've tried 

Exec $raw_event = $raw_event +$MessageSourceAddress;

But that does nothing. What is the correct syntax for this?

#2 russeller

Nevermind this, I posted too soon. It does work.