diff --git a/meta-forgefirm/recipes-extended/rsyslog/rsyslog_%.bbappend b/meta-forgefirm/recipes-extended/rsyslog/rsyslog_%.bbappend
index 547fc45..55f9daf 100644
--- a/meta-forgefirm/recipes-extended/rsyslog/rsyslog_%.bbappend
+++ b/meta-forgefirm/recipes-extended/rsyslog/rsyslog_%.bbappend
@@ -5,6 +5,11 @@
 # is trimmed in conf/distro/forgefirm.conf (PACKAGECONFIG:pn-rsyslog).
 FILESEXTRAPATHS:prepend := "${THISDIR}/${PN}:"
 
+# Start at 20 (after forgefirm-logging renders the rules at 19); stop
+# LAST at shutdown - after the controllers (K80) and forgectrl (K90) -
+# so their shutdown lines still reach the disk.
+INITSCRIPT_PARAMS = "start 20 2 3 4 5 . stop 95 0 1 6 ."
+
 do_install:append() {
     # The stock rotation set covers /var/log files this image never
     # writes; the ForgeFIRM tree has its own (forgefirm-logging).