Notes:
So if you're logging from the DMZ or you're using a cluster and log through a proxy, you may have problems with syslog
When syslog gets data it uses the source IP address to identify it, but through a proxy this creates a problem since all machines appear to be the same.
S-NG fixes this with naming and keeping the name in the log packet.