Add syslog example with action_port and action_protocol