# less /etc/syslog-ng.conf
#Destinations
destination dst_local { file("/var/log/messages"); };
destination dst_console { file("/dev/tty12"); };
destination dst_remote1 { udp("<IP1>" port(514)); };
destination dst_remote1_rfc5424 { udp("<IP1>" port(514) template("<$PRI>$MSGHDR$MSG")); };
destination dst_remote2 { udp("<IP2>" port(514)); };
destination dst_remote2_rfc5424 { udp("<IP2>" port(514) template("<$PRI>$MSGHDR$MSG")); };
destination dst_remote3 { udp("<IP3>" port(514)); };
destination dst_remote3_rfc5424 { udp("<IP3>" port(514) template("<$PRI>$MSGHDR$MSG")); };
destination dst_remote4 { udp("<IP1>" port(514)); };
destination dst_remote4_rfc5424 { }; << configuration is missing here for syslog number 4
This issue occurs due to incorrect handling of the 4th server information when generating the syslog configuration file.
This issue is resolved in NSX 6.4.6.