also i found log in C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Syslogd_Service._717ae3826e39cd5b6ad2c81df41fcd019dfd3a6_00000000_265e445f
Version=1
EventType=APPCRASH
EventTime=131902000515078526
ReportType=2
Consent=1
ReportIdentifier=eb8782fe-081e-11e9-80cb-9c8e994deaad
WOW64=1
Response.type=4
Sig[0].Name=Application Name
Sig[0].Value=Syslogd_Service.exe
Sig[1].Name=Application Version
Sig[1].Value=9.6.6.1
Sig[2].Name=Application Timestamp
Sig[2].Value=5c013768
Sig[3].Name=Fault Module Name
Sig[3].Value=KERNELBASE.dll
Sig[4].Name=Fault Module Version
Sig[4].Value=6.3.9600.19178
Sig[5].Name=Fault Module Timestamp
Sig[5].Value=5bc10573
Sig[6].Name=Exception Code
Sig[6].Value=e0434352
Sig[7].Name=Exception Offset
Sig[7].Value=00015ef8
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=6.3.9600.2.0.0.272.7
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=1033
UI[2]=C:\Program Files (x86)\Syslogd\Syslogd_Service.exe
LoadedModule[0]=C:\Program Files (x86)\Syslogd\Syslogd_Service.exe
LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
LoadedModule[2]=C:\Windows\SYSTEM32\KERNEL32.DLL
LoadedModule[3]=C:\Windows\SYSTEM32\KERNELBASE.dll
LoadedModule[4]=C:\Windows\system32\apphelp.dll
LoadedModule[5]=C:\Windows\AppPatch\AcGenral.DLL
LoadedModule[6]=C:\Windows\SYSTEM32\msvcrt.dll
LoadedModule[7]=C:\Windows\SYSTEM32\sechost.dll
LoadedModule[8]=C:\Windows\SYSTEM32\SspiCli.dll
LoadedModule[9]=C:\Windows\SYSTEM32\SHLWAPI.dll
LoadedModule[10]=C:\Windows\SYSTEM32\UxTheme.dll
LoadedModule[11]=C:\Windows\SYSTEM32\USER32.dll
LoadedModule[12]=C:\Windows\SYSTEM32\GDI32.dll
LoadedModule[13]=C:\Windows\SYSTEM32\WINMM.dll
LoadedModule[14]=C:\Windows\SYSTEM32\samcli.dll
LoadedModule[15]=C:\Windows\SYSTEM32\ole32.dll
LoadedModule[16]=C:\Windows\SYSTEM32\OLEAUT32.dll
LoadedModule[17]=C:\Windows\SYSTEM32\MSACM32.dll
LoadedModule[18]=C:\Windows\SYSTEM32\VERSION.dll
LoadedModule[19]=C:\Windows\SYSTEM32\SHELL32.dll
LoadedModule[20]=C:\Windows\SYSTEM32\USERENV.dll
LoadedModule[21]=C:\Windows\SYSTEM32\dwmapi.dll
LoadedModule[22]=C:\Windows\SYSTEM32\urlmon.dll
LoadedModule[23]=C:\Windows\SYSTEM32\ADVAPI32.dll
LoadedModule[24]=C:\Windows\SYSTEM32\WINSPOOL.DRV
LoadedModule[25]=C:\Windows\SYSTEM32\MPR.dll
LoadedModule[26]=C:\Windows\SYSTEM32\RPCRT4.dll
LoadedModule[27]=C:\Windows\SYSTEM32\CRYPTBASE.dll
LoadedModule[28]=C:\Windows\SYSTEM32\combase.dll
LoadedModule[29]=C:\Windows\SYSTEM32\WINMMBASE.dll
LoadedModule[30]=C:\Windows\SYSTEM32\profapi.dll
LoadedModule[31]=C:\Windows\SYSTEM32\iertutil.dll
LoadedModule[32]=C:\Windows\SYSTEM32\WININET.dll
LoadedModule[33]=C:\Windows\SYSTEM32\bcryptPrimitives.dll
LoadedModule[34]=C:\Windows\SYSTEM32\cfgmgr32.dll
LoadedModule[35]=C:\Windows\SYSTEM32\DEVOBJ.dll
LoadedModule[36]=C:\Windows\SYSTEM32\SHCORE.DLL
LoadedModule[37]=C:\Windows\SYSTEM32\MSVBVM60.DLL
LoadedModule[38]=C:\Windows\SYSTEM32\kernel.appcore.dll
LoadedModule[39]=C:\Windows\SYSTEM32\SXS.DLL
LoadedModule[40]=C:\Windows\SYSTEM32\clbcatq.dll
LoadedModule[41]=C:\Windows\SYSTEM32\CRYPTSP.dll
LoadedModule[42]=C:\Windows\system32\rsaenh.dll
LoadedModule[43]=C:\Windows\SYSTEM32\bcrypt.dll
LoadedModule[44]=C:\Windows\SYSTEM32\KiwiSocket.ocx
LoadedModule[45]=C:\Windows\SYSTEM32\ws2_32.DLL
LoadedModule[46]=C:\Windows\SYSTEM32\NSI.dll
LoadedModule[47]=C:\Windows\SYSTEM32\mswinsck.ocx
LoadedModule[48]=C:\Windows\SYSTEM32\WSOCK32.dll
LoadedModule[49]=C:\Windows\SYSTEM32\SVCIT.ocx
LoadedModule[50]=C:\Windows\SYSTEM32\MFC42u.DLL
LoadedModule[51]=C:\Windows\SYSTEM32\ODBC32.dll
LoadedModule[52]=C:\Windows\SYSTEM32\actskn43.ocx
LoadedModule[53]=C:\Windows\SYSTEM32\comdlg32.dll
LoadedModule[54]=C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.9600.17810_none_7c5b6194aa0716f1\COMCTL32.dll
LoadedModule[55]=C:\Windows\SYSTEM32\IGThreed40.ocx
LoadedModule[56]=C:\Windows\SYSTEM32\OLEPRO32.DLL
LoadedModule[57]=C:\Windows\system32\asycfilt.dll
LoadedModule[58]=C:\Windows\SYSTEM32\KiwiGrid3.ocx
LoadedModule[59]=C:\Windows\SYSTEM32\KiwiSubtmr.dll
LoadedModule[60]=C:\Windows\SYSTEM32\COMCTL32.OCX
LoadedModule[61]=C:\Windows\SYSTEM32\smtps81.ocx
LoadedModule[62]=C:\Windows\SYSTEM32\netapi32.dll
LoadedModule[63]=C:\Windows\SYSTEM32\netutils.dll
LoadedModule[64]=C:\Windows\SYSTEM32\srvcli.dll
LoadedModule[65]=C:\Windows\SYSTEM32\wkscli.dll
LoadedModule[66]=C:\Windows\SYSTEM32\LOGONCLI.DLL
LoadedModule[67]=C:\Windows\SYSTEM32\crypt32.dll
LoadedModule[68]=C:\Windows\SYSTEM32\MSASN1.dll
LoadedModule[69]=C:\Windows\SYSTEM32\secur32.dll
LoadedModule[70]=C:\Windows\SYSTEM32\ssnmptrp90.ocx
LoadedModule[71]=C:\Windows\SYSTEM32\ipdaem160.ocx
LoadedModule[72]=C:\Windows\SYSTEM32\ssnmpag90.ocx
LoadedModule[73]=C:\Windows\SYSTEM32\XceedZip.dll
LoadedModule[74]=C:\Windows\SYSTEM32\mscoree.dll
LoadedModule[75]=C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
LoadedModule[76]=C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
LoadedModule[77]=C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.8428_none_d08a11e2442dc25d\MSVCR80.dll
LoadedModule[78]=C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\2c5ddb892ef42c85945c11a94cb535c4\mscorlib.ni.dll
LoadedModule[79]=C:\Program Files (x86)\Syslogd\SolarWinds.Licensing.KiwiSyslog.COMWrapper.dll
LoadedModule[80]=C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
LoadedModule[81]=C:\Program Files (x86)\Syslogd\SolarWinds.Licensing.Framework.dll
LoadedModule[82]=C:\Program Files (x86)\Syslogd\SolarWinds.Logging.dll
LoadedModule[83]=C:\Program Files (x86)\Syslogd\log4net.dll
LoadedModule[84]=C:\Windows\assembly\NativeImages_v2.0.50727_32\System\f9e02038882aa5a8e51484f253e67a65\System.ni.dll
LoadedModule[85]=C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\5bf487a82026b5ec2c9844eab53b8d79\System.Configuration.ni.dll
LoadedModule[86]=C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\5562cf60fb6b2737b539202dcebf3e44\System.Xml.ni.dll
LoadedModule[87]=C:\Windows\SYSTEM32\shfolder.dll
LoadedModule[88]=C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\a5b34829d88c0cb723b311f3ec0025cb\System.Security.ni.dll
LoadedModule[89]=C:\Windows\SYSTEM32\DPAPI.dll
LoadedModule[90]=C:\Windows\SYSTEM32\ncrypt.dll
LoadedModule[91]=C:\Windows\SYSTEM32\NTASN1.dll
LoadedModule[92]=C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\4fcbc382e5890ec54c36513724e0e71c\System.Drawing.ni.dll
LoadedModule[93]=C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\724d6b27d4d727394819d8a4fa1a7b18\System.Windows.Forms.ni.dll
LoadedModule[94]=C:\Windows\SYSTEM32\IPHlpApi.DLL
LoadedModule[95]=C:\Windows\SYSTEM32\WINNSI.DLL
LoadedModule[96]=C:\Windows\SYSTEM32\dhcpcsvc6.DLL
LoadedModule[97]=C:\Windows\SYSTEM32\dhcpcsvc.DLL
LoadedModule[98]=C:\Windows\SYSTEM32\scrrun.dll
LoadedModule[99]=C:\Windows\SYSTEM32\netbios.dll
LoadedModule[100]=C:\Windows\SYSTEM32\DNSAPI.dll
LoadedModule[101]=C:\Windows\SYSTEM32\KRDPLogger.dll
LoadedModule[102]=C:\Windows\SYSTEM32\KRDPLoggerforIPv6.dll
LoadedModule[103]=C:\Windows\SYSTEM32\ipinfo90.ocx
LoadedModule[104]=C:\Windows\system32\mswsock.dll
LoadedModule[105]=C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
LoadedModule[106]=C:\Windows\SYSTEM32\MSVCR120_CLR0400.dll
LoadedModule[107]=C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\2679bf53374eaee3d0bfc7e4ffabe020\mscorlib.ni.dll
LoadedModule[108]=C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
LoadedModule[109]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ad24492050301d4b4d48fd00d831303c\System.ni.dll
LoadedModule[110]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\bd49b5142a5a58f840dc44c72fe288b3\System.Configuration.ni.dll
LoadedModule[111]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\3db1416a1f2afcc33913f210c17618f2\System.Xml.ni.dll
LoadedModule[112]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\b1a2c35087dbc2e09b0817c989c18271\System.Core.ni.dll
LoadedModule[113]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\e7cd8a54f38fa7d99ce56f0862d2ecfb\System.Numerics.ni.dll
LoadedModule[114]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\688c7d05c81d1169d21e0305b092c819\System.Runtime.Serialization.ni.dll
LoadedModule[115]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\747409c5dcadb11544f591967acfa901\System.Xml.Linq.ni.dll
LoadedModule[116]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data\a73db803577cab3b401d1b1618483b77\System.Data.ni.dll
LoadedModule[117]=C:\Windows\Microsoft.Net\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
LoadedModule[118]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\aaaa1dcb31e89d4e37e89d014a679760\System.Drawing.ni.dll
LoadedModule[119]=C:\Windows\SYSTEM32\PacketX.dll
LoadedModule[120]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\666ab63c0eed9e2ac2619f136c483c61\System.Windows.Forms.ni.dll
LoadedModule[121]=C:\Windows\SYSTEM32\packet.dll
LoadedModule[122]=C:\Windows\SYSTEM32\TimerLite.dll
LoadedModule[123]=C:\Program Files (x86)\Syslogd\SolarWinds.KiwiSyslog.WebAccess.Data.dll
LoadedModule[124]=C:\Windows\SYSTEM32\psapi.dll
LoadedModule[125]=C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\9da4a8baa01f6ada47398a31817143d0\System.Runtime.Remoting.ni.dll
LoadedModule[126]=C:\Windows\assembly\GAC_MSIL\System.Data.SqlServerCe\4.0.0.0__89845dcd8080cc91\System.Data.SqlServerCe.dll
LoadedModule[127]=C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\ba0e4ca73a43165a321a1e02a2f0a995\System.Data.ni.dll
LoadedModule[128]=C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
LoadedModule[129]=C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\7134be9f26e171dafd0218df50c0a1a1\System.Transactions.ni.dll
LoadedModule[130]=C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
LoadedModule[131]=C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v4.0\sqlceme40.dll
LoadedModule[132]=C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll
LoadedModule[133]=C:\Windows\system32\wintrust.dll
LoadedModule[134]=C:\Windows\SYSTEM32\imagehlp.dll
LoadedModule[135]=C:\Windows\SYSTEM32\gpapi.dll
LoadedModule[136]=C:\Windows\SYSTEM32\cryptnet.dll
LoadedModule[137]=C:\Windows\SYSTEM32\WLDAP32.dll
LoadedModule[138]=C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v4.0\sqlceer40EN.DLL
LoadedModule[139]=C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v4.0\sqlcese40.dll
LoadedModule[140]=C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v4.0\sqlceqp40.dll
LoadedModule[141]=C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\9b6f6f4bb8926294bf3b53118321697a\System.EnterpriseServices.ni.dll
LoadedModule[142]=C:\Windows\Microsoft.NET\Framework\v4.0.30319\diasymreader.dll
FriendlyEventName=APPCRASH
ConsentKey=APPCRASH
AppName=Syslogd_Service.exe
AppPath=C:\Program Files (x86)\Syslogd\Syslogd_Service.exe
ReportDescription=Stopped working
ApplicationIdentity=00000000000000000000000000000000
also i noticied that my version kiwi syslog v 9.6.6.1 works on windows server 2012 R2, sql 2012 standard, maybe this is problem?