after an upgrade I found that I hade to change zmlogrotate and add the line:
%zimbra ALL=NOPASSWD:/etc/init.d/syslog-ng restart to the sudo file.

Paul