syslog_parser divided into positive and negative tests