fix syslog faces