I have UT set to export to GrayLog (ELK) and it identifies itself as "LOCALHOST" and often times will break the SYSLOG stream into other source identifiers like : "...lass" or "class" or "...ass" etc (seems like a formatting bug). I was also able to replicate this in SPLUNK so i don't believe this is an issue with GrayLog. Is there anything in the roadmap to make SYSLOG output tunable/configurable?, or atleast pull the actual hostname/FQDN of the system?

added: the IDS/IPS reports itself as "FILTERLOG:" -- this is the process name in the SourceName field. again seems like a formatting issue with the syslog output. please advise.