A very good point Sindy.
Hopefully they (MT) do read this and change it in later release.
If you look at my old post here: http://forum.mikrotik.com/t/logging-prefix-is-a-mess-sup-105353-sup-144261-waiting-for-mt-to-support-rfc-5424/111067/1
not all is done in simple and straight forward manner.