It's possible the default path was written for a different scenario, like running the connector on a linux agent. Or, maybe we just carried over the wrong default from the snort connector. Hard to say.
There is no alert.log on the LEM appliance, though, for sure (I checked). Using something like local0 will make it super easy to configure (/var/log/local0.log).