[syslog-ng] Experiences and question from a newbie