to make it go away, could try getting rid of the "service log sequence numbers" (or whatever exact syntax it is) in the device's ios config

if you don't need the sequence numbering for audit, that's easier than trying to hack in a new syslog-ng.conf template.

luck,

R.