I chcked all the steps in https://github.com/osquery/osquery/issues/1964 too. Syslogd can write the

/var/osquery/syslog_pipe

pipe, can be read by

cat

as well.