Remote syslog server gets added to " DHCP service events" without being checked.
A remote syslog server gets added to the dhcp services in /var/etc/syslog.conf without "DHCP service events" being checked.
This has been reproduced on a fresh install where no remote sysloging was ever configured. The first time you set the remote server it will add it to the dhcp services, without "DHCP service events" being checked. If you edit /var/etc/syslog.conf to remove it, it will just be added back in when you toggle remote syslog off/on.
This has been seen in 2.1 and 2.2.
Forum topic: https://forum.pfsense.org/index.php?topic=73734.0