[syslog-ng] using correlation to filter out some messages ?