split search criteria into a new method for reusability purposes within syslog