Thanks for the explanation.
After running 'zmsyslogsetup', the syslog-ng.conf file is not valid - if I try to restart syslog-ng, it fails and tells me the syntax is incorrect.
The problem is this line:
source zimbra_src { unix-stream("/dev/log"; keep-alive(yes); max-connections(20)
; }; # zimbra
Where syslog-ng doesn't understand the syntax where unix-stream() gets additional parameters. I changed it into:
source zimbra_src { unix-stream("/dev/log"); }; # zimbra
And now syslog-ng runs fine.
After that I did 'tail -f /var/log/zimbra*' and ran 'zmstatuslog' but there wasn't any output in the log files.
Can you offer any other things I may try?