refactor formatter for performance
add doc for syslog handler