Rather then setting up syslog drains for only one app or all apps, one should be able to set drains for spaces and orgs.