Re: [syslog-ng] EWMM and sudo app-parser