Is it possible to have a variable in the description of a rule that will show the syslog message? For instance, the $log.group$ rules shows a short view of the syslog message.
This would be nice, as I have a monitor tool that sends syslog message when a device goes up or down, and it would show the device name in the timeline rather than just a static description.
