real-time analysis syslog