Responded to @kasparsd:
Interestingly, the default syslog format is a custom Mikrotik format. For standard format you need to select BSD syslog which is actually RFC3164.
Grafana Loki and Promtail use this library for parsing syslog payloads https://github.com/leodido/go-syslog