Generally speaking, packets originate from the interface closest to the destination (SEM), which could explain why the MPLS IP address is the source IP of the syslog messages. Cisco have a command called logging source-interface which allows you to specify which interface the syslog is transmitting from. You could try enabling that command and specifying an interface with an internal IP.
↧