To answer both questions:
1. Kiwi Syslog relays email through the specified SMTP server. I would check to see how quickly they are being processed on the mail server side.
2. The filters do use an AND, and not an OR. You could try a RegEx value the contains logon