use source::syslog by default