Add syslog user helper