I want to check a few things about this. Are the events syslog from a network device, or windows events from an agent node? If the latter, I am wondering if the event itself contains the hostname and not the IP address, dependent on whether there is a DNS host entry in the DNS server for which the windows server is able to resolve the IP address against. If this is the case, it will be a case of ensuring DNS is set up correctly.
↧