transform error_log -> syslog