diff --git a/xCAT/postscripts/syslog b/xCAT/postscripts/syslog
index 358c825c1..35570a3a1 100755
--- a/xCAT/postscripts/syslog
+++ b/xCAT/postscripts/syslog
@@ -109,7 +109,7 @@ if [ $isLinux -eq 1 ] && [ -a $sysconfig ]; then
 
   #check if it is ryslog version 3, it has totally different settings in /etc/syslog.cong
   if [ $isRsyslog -eq 1 ]; then
-    grep "SYSLOGD_OPTIONS" $sysconfig | grep -e "[\-c 3|\-c3]" 2>&1 1> /dev/null
+    grep "SYSLOGD_OPTIONS" $sysconfig | grep -e "[\-c 3|\-c3|\-c4|\-c 4]" 2>&1 1> /dev/null
     if [ $? -eq 0 ]; then
       isC3=1
     fi