Make CEF syslog'ing more flexible