don't pass full path to CEF logs