Both /tmp and /var/log are mounted using tmpfs, so it really makes no difference at all where syslog is going to be routed to. /var/log only exist in RAM