There is a major change in packaging: syslog-ng-mod-json is part of syslog-ng-core from now (due to the new app-parser and Enterprise Wide Message Model).