# SouceName Format

**URL:** <https://community.graylog.org/t/soucename-format/904>\
**Category:** Graylog Central (peer support)\
**Tags:** pipeline-rules\
**Created:** [April 24, 2017, 9:26am UTC](https://community.graylog.org/t/soucename-format/904 "2017-04-24T09:26:18Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![rregeA](https://avatars.discourse-cdn.com/v4/letter/r/eada6e/32.png) [@rregeA](https://community.graylog.org/u/rregeA)\
**Post date:** [April 24, 2017, 9:26am UTC](https://community.graylog.org/t/soucename-format/904/1 "2017-04-24T09:26:18Z")

</div>

Hello,

I have a windows Fileserver sending in logs to Graylog using nxlog and Sidecar.

The Source name of the log is being shown like this on Graylog:  
Microsoft-Windows-Security-Auditing

i would like to have the source name generated like this:  
Microsoft Windows Security Auditing

since am sending logs to Splunk and i need this format for the Splunk apps to work. Is any way i can control this in graylog?

Thank you,  
Rigert

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [April 24, 2017, 9:46am UTC](https://community.graylog.org/t/soucename-format/904/2 "2017-04-24T09:46:13Z")

</div>

You can mutate message fields using processing pipeline rules: [http://docs.graylog.org/en/2.2/pages/pipelines.html](http://docs.graylog.org/en/2.2/pages/pipelines.html)