Syslog - Host

• Name or IP-Address of the sender

• Sometimes missing, sometimes present, sometimes meaningless or invalid (depending on configuration)

• Often duplicate if multiple networks are being monitored (e.g. a service provider monitoring customer networks)

• Intention is to provide the name of the original sender when passing through syslog relays.