change provider for remote syslog