find rule change hostname -> id