more syslog work