devnull is now running a newer syslog-ng (3.3) and is using, essentially, the CI's syslog-ng config and sec.conf. This means remote host logs are going to /var/log/HOSTS/<year>/<month>/<host> and we may see some notices that sec is now alerting on to this list. Just a heads up.