append *.* to syslog forwarder conf if syslog_aggregator.all switch is present