I've had a similar (maybe the same) problem many moons ago. I recall this being something to do with the location of
# Added for Cisco Syslog Analyzer (begin)
# Added for Cisco Syslog Analyzer (end)
in /etc/syslog.conf. I believe I got around this by moving these lines from the bottom of syslog.conf (where the RME install puts 'em) to the top.