WARN threshold for SYSLOG appender