Syslog drain