I have a server with Orion and Kiwi syslog. The log files are going to Orion syslog instead of Kiwi. I know this works because this is a new server replacing an old server with the same setup. On the old server it goes to Kiwi as I want.
Try the following:
From a command line run: netstat -ao -p udp
Look for port 514
Next open task manager (make sure PIDs are being shown) and look for the PID that is listening on port 514. It should be a Syslogd process. If it is any other process, you will want to kill it, and restart the Kiwi Syslog server service. You should now see syslogs coming in the server console. If this works for you, make sure to set the other syslog service to disabled.
