This forum is only for reproducible bugs with csf and lfd (i.e. not iptables problems, lack of understanding how to use a feature, etc). Posts must be accompanied with full technical details of the problem and how it can be recreated. Any posts not adhering to this, or not considered bugs, will be moved to the General Discussion (csf) forum.
The system check iterates through the PID's in /proc/PID/ and checks whether the /proc/PID/exe is a symlink to syslogd or rsyslogd to see if it is running. So, for example, if rsyslogs is a (deleted) process this check will fail until rsyslogd is restarted.