I'm wondering whether it would be better if fq_name and ip_address were always included. At least ip_address. Otherwise if you haven't made your subject distinct enough, you risk not being able to identify which host is having a problem. Do you have an opinion, @tzz?