Group is syslog, not upstart