using same attributes from syslog and whitelist to make the validation