diff --git a/filebeat/input/syslog/input.go b/filebeat/input/syslog/input.go
index 10365c6d3f91..71f7a508e763 100644
--- a/filebeat/input/syslog/input.go
+++ b/filebeat/input/syslog/input.go
@@ -141,6 +141,11 @@ func NewInput(
 				},
 				Fields: common.MapStr{
 					"message": string(data),
+					"log": common.MapStr{
+						"source": common.MapStr{
+							"address": metadata.RemoteAddr.String(),
+						},
+					},
 				},
 			})
 		} else {