It would be good to set group to syslog as well so that admin users can be a part of that group and view the logs without having to sudo as syslog.