Just want to verify that picking option 1 won't cause problems for the journal daemon? Installing syslog-ng should allow the User to use either syslog-ng <or> journalctl, not disable one for the other.