Steps:


1. You need to edit syslog-ng.conf

2. Insert line in destination: destination d_tcp {tcp("192.168.x.x", port(1234));}; See example below

3. Insert line after every log: destination(d_tcp); but not to line with destination(d_drop). See example below

4. svcadm restart syslog-ng 


Example:  

destination d_web { file("/var/log/web.log"); };
destination d_cli { file("/var/log/cli.log"); };
destination d_app { file("/var/log/app.log"); };
destination d_local { file("/var/log/messages" suppress(1800));};
destination d_authlog { file("/var/log/secure.log"); };
destination d_ha_heartbeat { file("/var/log/ha/heartbeat.log"); };
destination d_ha_cluster { file("/var/log/ha/cluster.log"); };
destination d_daemon { file("/var/log/daemon.log"); };
destination d_software_update { file("/var/log/software_update.log"); };
destination d_kvm_lib { file("/var/log/kvm.log"); };
destination d_tcp {tcp("192.168.6.252", port(514));};
destination d_drop { };


# ALL DESTINATIONS ARE FINAL (to avoid same messages in different files). BE CAREFUL WITH THE ORDER OF THE LOG EXPRESSIONS
log { source(s_local); filter(f_kvm_spam); destination(d_drop); flags(final); };
log { source(s_local); filter(f_ha_spam); destination(d_drop); flags(final); };
log { source(s_local); filter(f_collectd_spam); destination(d_drop); flags(final); };
log { source(s_local); filter(f_statistics_spam); destination(d_drop); flags(final); };
log { source(s_local); filter(f_web); destination(d_web); destination(d_tcp); flags(final); };
log { source(s_local); filter(f_cli); destination(d_cli); destination(d_tcp); flags(final); };
log { source(s_local); filter(f_app); destination(d_app); destination(d_tcp); flags(final); };
log { source(s_local); filter(f_authpriv); destination(d_authlog); destination(d_tcp); flags(final); };
log { source(s_local); filter(f_ha_heartbeat); destination(d_ha_heartbeat); destination(d_tcp); flags(final); };
log { source(s_local); filter(f_ha_cluster); destination(d_ha_cluster); destination(d_tcp); flags(final); };
log { source(s_local); filter(f_daemon); destination(d_daemon); destination(d_tcp); flags(final); };
log { source(s_local); filter(f_software_update); destination(d_software_update); destination(d_tcp); flags(final); };
log { source(s_local); filter(f_kvm_lib); destination(d_kvm_lib); destination(d_tcp); flags(final); };
log { source(s_local); filter(f_local); destination(d_local); destination(d_tcp); flags(final); };