update syslog handling to follow http://cookbook.logstash.net/recipes/central-syslog/