looks good. I asked about the facility because we use facilities pretty heavily for directing where to write the logs in production. Should be fine on the monitoring server.