update rsyslog syntax