syslog is a longrun service to support legacy applications that only support logging through a syslog socket.
It runs an instance of
s6-socklog
with the socket set to /dev/log.
The logs are then processed by
s6-log
(see logging directory).