support ubuntu's /var/log which are root.syslog