new year check for syslog should be smarter

[tstack]

If the previous date is relatively close in time (e.g. less than 6 months), we should not assume a new year has started and just sort the whole log.