syslog: api cleanup