If folder owner set to root but rsyslog is running as 'syslog' user then it can not write these files and silently fails.