I believe that the _source_ of the message is where that is set, like sshd or whatever combines messages to avoid flooding and syslogd just records what it is given. -- "There's plenty of room for all God's creatures... Right next to the mashed potatoes."