@johndoe: Did you try turning on verbose status logs from osqueryd to ensure that your scheduled queries are actually being run? I don't have any specific experience with syslog logging, but that is a general good first step when debugging logging issues.