Our issue was that the cc_ng job spec had a default value for syslog_aggregator that's a string which, of course, would break when doing the "properties.syslog_aggregator.address" test.