Checking if the Logs are being send to Syslog Server

you may use tcpdump:

tcpdump -nei any port 514

Thanks for the reply, here is the ss from the command. the blank part is my public IP. Do you see any kind of problem cuz as much as i see Logs are going.

Looks ok for me ... if 172.16.1.8 is your "external" Syslog-server.

you may try tcpdump -nei any | grep 172.16.1.8

to see if there are answer-packets too ...

Thanks now i can check the in/out packets from 514 or any port. 

here is no port limitation ... but you can cascade multiple grep ...

tcpdump -nei any | grep 172.16.1.8 | grep 514

here is no port limitation ... but you can cascade multiple grep ...

tcpdump -nei any | grep 172.16.1.8 | grep 514