Faultfinding techniques for logging failure.

There is a linux based testing server running syslog-ng and Nagios (redhat
7.3).

There are a few NT servers that are supposed to log their backups to this
server using the syslog-ng WinNT client. Logging to port 5140.

They don't, however data sent via telnet to port 5140 both sent by itself
and by one other machine is logged.

Any ideas for further faultfinding, because I'm now stumped. Will do some
further testing related to potential firewalling but there shouldn't be one
in the way.

Also, how is the priority passed to 3rd party programs. I get lines
formatted as below, from which I can extract a time-stamp, hostname and
message. But no priority. Is priority normally incorporated as a part of the
message?

<13>Mar  5 13:00:44 localhost TEST
_______________________________________________
syslog-ng maillist  -  syslog-ng@xxxxxxxxxxxxxxxx
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html