[syslog-ng] Is there a standard for naming tag/value pairs when parsing