From what you wrote, it looks like you are experiencing an issue with syslog-ng rather than ELK itself. Have you tried asking the syslog-ng developers?
If the issue is related with the ELK stack, please provide us with more information about the issue. We would appreciate detailed steps to reproduce the issue.
Hope it helps.
Javier J. Salmerón
Was my answer helpful? Click on