[syslog-ng] first post - newbie question