syslog file check