In our setup, many devices have one IP by which they are most commonly know, and which is currently used to identify the devices in NCM. However, some also use a different interface and therefore IP when sending syslog messages. This causes things like real time change detection not to function properly as the IP received is not correctly matched to the device. Is there a way to do this so that we can continue to identify devices by their main IP but also recognize messages from a secondary one?
