loghost - syslogd - filter?