ENH: asterisk filter to support syslog format