[syslog-ng] classify/assign events to tenants/customers