I'm glad you got this resolved. Sometimes fellow thwack members actually have knowledge that even support may not be able to piece together. I've had my own issues with kiwi syslog server myself. I could never get the service to stay running on windows2012R2 domain controller that was STIG'd. I may go back and try again. My temporary solution has been to run free version of WUG syslog server to comply with DISA security requirements. I'm hoping to be able to go and try a newer version of kiwi syslog server in near future because I did pay for it and honestly WUG syslog server free version is terrible.
Mega props to jtc_osaka for providing solution.