syslog is a longrun service to support legacy applications that only support logging through a syslog socket.
It runs an instance of
s6-socklog
with the socket set to /var/run/log.
The logs are then processed by
s6-log
(see logging directory).