The default osquery configuration logs to a folder in

/var/log

but osquery can be configured to log to syslog instead by using

--logger_plugin=syslog