We currently need to send syslogs to Orion and LEM. Sending to Orion takes resources and I/O that is unnecessary since we have LEM. Why send tons of syslogs to Orion when all we want are the change syslogs? We need to maintain what is sent to LEM (everything) hence we cannot change the syslog output by filtering.
