rework syslog