syslog fields are optional