Update syslog forwarder format