edit `format` section of in_syslog