Why do I continue to maintain #sysklogd on Linux when there's #rsyslog and #syslogng?
I believe what sysklogd has going for it is exactly what the competitors sacrificed: simplicity, a tiny footprint, zero dependencies beyond libc, and a config file a human can read in five minutes. On embedded systems, routers, and appliances that's not a consolation prize β it's the point.