added first sql fro syslogs