evt.info field implemented and used by the default event renderer. Syslog is the first enabled protocol decoder.