Orion's Syslog and Trap services are pretty basic when it comes to alerting and data retention. Regrettably it cannot currently handle per-host alerting like the Advanced Alert Manager as it is more per-message focused so once the filter is matched all additional matching messages are held from activating further alerts regardless of host. One could wager a guess that Kiwi Syslog Server may be more full-featured in this area but I have not used it myself to be certain.
Cheers