<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Lucida Console";
panose-1:2 11 6 9 4 5 4 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-AU link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal>Hi,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Hoping you can assist me, I haven’t really come across anything that makes full sense to me in my searching of various sites/forums.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>This is an example log.<o:p></o:p></p><p class=MsoNormal><span style='font-size:9.0pt;font-family:"Lucida Console";mso-fareast-language:EN-AU'>Jun 14 11:57:27 PM.685 UTC : %UC_LOGIN-4-AuthenticationFailed: %[Login Date/Time=06/15/2018 at 09:57:27][Login IP Address/Hostname=10.25.1.16][Login Interface=cucm-uds][Login UserID=POBAR][App ID=Cisco Tomcat][Cluster ID=][Node ID=cucmsub-prd-t2]: Login Authentication failed.</span><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Syslog-ng reads the $HOST as PM.685 ; can I get it to rewrite host as cucmsub-prd-t2 ? i.e. Node ID=<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Thanks you<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='color:black;mso-fareast-language:EN-AU'>Kind Regards,</span><span style='font-family:"Times New Roman",serif;color:black;mso-fareast-language:EN-AU'><o:p></o:p></span></p><p class=MsoNormal><span style='color:black;mso-fareast-language:EN-AU'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:#7F7F7F;mso-fareast-language:EN-AU'>Daniel Ehrlich<o:p></o:p></span></b></p><p class=MsoNormal><i><span style='font-size:8.0pt;font-family:"Verdana",sans-serif;color:#7F7F7F;mso-fareast-language:EN-AU'>MastInfoSysSec, DipBA, SSCP, F5-CA, Splunk CA</span></i><i><span style='font-size:8.0pt;color:black;mso-fareast-language:EN-AU'><o:p></o:p></span></i></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:#7F7F7F;mso-fareast-language:EN-AU'>ICT Security Officer<b><br></b></span><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:#7F7F7F;mso-fareast-language:EN-AU'>ICT Client Services|Infrastructure Services</span><span style='font-family:"Verdana",sans-serif;color:#7F7F7F;mso-fareast-language:EN-AU'><br></span><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:#7F7F7F;mso-fareast-language:EN-AU'>Phone: +61 7 4687 5600 Email: </span><span style='color:black;mso-fareast-language:EN-AU'><a href="mailto:Daniel.Ehrlich@usq.edu.au"><span style='color:blue'>Daniel.Ehrlich@usq.edu.au</span></a></span><span style='font-size:12.0pt;color:black;mso-fareast-language:EN-AU'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:#7F7F7F;mso-fareast-language:EN-AU'>Toowoomba | Queensland | 4350 | Australia</span><span style='color:black;mso-fareast-language:EN-AU'><o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div><PRE>
_____________________________________________________________
This email (including any attached files) is confidential and is for the intended recipient(s) only. If you received this email by mistake, please, as a courtesy, tell the sender, then delete this email.
The views and opinions are the originator's and do not necessarily reflect those of the University of Southern Queensland. Although all reasonable precautions were taken to ensure that this email contained no viruses at the time it was sent we accept no liability for any losses arising from its receipt.
The University of Southern Queensland is a registered provider of education with the Australian Government.
(CRICOS Institution Code QLD 00244B / NSW 02225M, TEQSA PRV12081 )
</PRE></body></html>