added syslog to logstash forwarder