Right, obvious in hindsight.
Putting a “user.debug -/dev/null” in syslog.conf has got rid of it, and helps the general performance, though it feels it’s just masking the problem since the SDK will still be sending vast amounts of debug data out to syslogd.