Hi Ryan,
Looking at your original post, it looks to me like your problem is how you configure the forwarding from the RSyslog server rather than forwarding from Kiwi.
Kiwi already has the ability to forward whilst retaining the original (source) address - see image below.
Google should be your friend to resolve this and a quick look found this URL
rsyslog - Syslog forwarding loses original hostname - Server Fault
Dog