adding host to audit event