modify the syslog filter