path eventlog => syslog