implementation of correlation of syslog messages