I've run into that issue when running a similar setup for a host that aggregates syslog. I would hope we warn people not to use the feature for a setup like that