fix syslog datetime field to UTC