[syslog-ng] filtering vs. keeping all logs