Add syslog grok filter