change syslog:tcp process