read syslog appname from command or config