only use syslog by default