move syslog configuration to correct place