[Observium] Syslog rules