- ip
- IP of remote host received syslog reports. Also
            used in the login/logout watch module (see
            above). 
- facility
- Syslog facility for received syslog
            reports. 
- priority
- Syslog priority for received syslog
            reports. 
- syslog_msg
- Syslog message for received syslog
            reports.