you might want to chage this to

```
syslog {
    type => syslog_relay
    port => 5000
}
```
according to the newest version...