start syslog first