RE: [syslog-ng]mark() option?