Put 'host' back into the audit log for logstash (ready for review)