нет /etc/syslog.conf
 

root@localhost]# find / -name syslog*
/usr/share/dracut/modules.d/98syslog/syslog-genrules.sh
/usr/share/dracut/modules.d/98syslog/syslog-cleanup.sh
/usr/share/man/man3p/syslog.3p.gz
/usr/share/man/man0p/syslog.h.0p.gz
/usr/share/man/man2/syslog.2.gz
/usr/share/man/man3/syslog.3.gz
/usr/share/perl5/syslog.pl
/usr/share/doc/rsyslog-4.4.2/syslog_parsing.html
/usr/share/doc/rsyslog-4.4.2/syslog_protocol.html
/usr/share/doc/mdadm-3.1.2/syslog-events
/usr/lib/python2.6/lib-dynload/syslog.so
/usr/lib/perl5/bits/syslog-ldbl.ph
/usr/lib/perl5/bits/syslog-path.ph
/usr/lib/perl5/bits/syslog.ph
/usr/lib/perl5/sys/syslog.ph
/usr/lib/perl5/syslog.ph
/usr/lib/ruby/1.8/i386-linux/syslog.so
/usr/include/bits/syslog-ldbl.h
/usr/include/bits/syslog-path.h
/usr/include/bits/syslog.h
/usr/include/sys/syslog.h
/usr/include/syslog.h
/var/run/syslogd.pid
/etc/logrotate.d/syslog
/etc/audisp/plugins.d/syslog.conf // странный путь для syslog
/selinux/class/system/perms/syslog_console
/selinux/class/system/perms/syslog_mod
/selinux/class/system/perms/syslog_read
[root@localhost]# cat /etc/audisp/plugins.d/syslog.conf
# This file controls the configuration of the
# syslog plugin. It simply takes events and writes
# them to syslog.

active = no
direction = out
path = builtin_syslog
type = builtin
args = LOG_INFO
format = string
не то ведь да??

syslog-ng, вроде, должен быть.