Hi,

> Thanks  for your guidance, I'm using syslog-ng docker file, should I test with bare syslog-ng without docker before filling an issue?

It may come in handy if we know whether you can reproduce the issue without Docker's network interfaces.
Please also share the exact reproduction steps in the issue.

--
László Várady