Argh, no, not sure if it logs to syslog. If it doesn't, we'll have to use the same thing we do for nginx logs, which polls the logs on a regular basis.