syslog format change + using null for empty ident should be discouraged

Added EMPTY_IDENT variable that should be used if no
meaningfull ident value exist.

Change the syslog format, so it would be compatible with what the log-parser expects