specify provider when starting remote_syslog