There's one issue, it is actually substituting for all other fields where it finds the pattern "name=". I am only trying to substitute if the field is "name=". But with what we've currently, it changed couple of more fields .. source-zone-name to source-zone-ipsec.name, policy-name to policy-ipsec.name..
I am trying to just substitute the actual fields (if exists in the event) to avoid any field conflicts.
Thanks