I have a lot of devices. being able to quickly identify them is nice; there seems to be a hostname -> host json entry on all of these, that would be easily to be pulled.

yes please this

Agreed. In our case, for Fortigate. In an SD Wan environment without IPs on the VPN interface, the DMZ IP is reported as the host.ip field (which is often left default), it would be great for this to be able to be renamed, or pulled from the host.hostname field in the logs

I would love to add an alias for each of my Fortigates instead of looking up the local IP of each when I need to reference logs.