I seem to be getting a duplicate host header in my udp syslog input where the IP is printed twice. 

IP/IP   any ideas where it comes from ?   


Same result for either of these. 
#source s_net_udp       {udp(ip(0.0.0.0) port(514) keep_hostname(yes) so_rcvbuf(262142));};
#source s_net_udp        {syslog(ip(10.189.252.62) port(514) transport("udp") flags(no-hostname) so_rcvbuf(262142));};



Jun  8 13:55:21 192.168.10.10/192.168.10.10  fw-aplha %ASA-4-106 ..............