Meh. Forgot one variable...
And another one :-( Working in the eve is a **bad** idea.
Merge pull request #416 from adesso-mobile/master

IETF syslog grok fixes :-(