fixed issue with split for syslog case