https://thwack.solarwinds.com/docs/DOC-186750#comment-209919
Try to take a second look at that..
Your Orion is not log menegment system
I forward from kiwisyslog to Orion only traps and syslog messages that I considered as emergency....
Syslog and traps can get out of control so fast....
That why you can set alert in kiwisyslog for minimum and maximum message per hour that will tell you if things are out of control