Syslog currently only comes in via UDP on the Rio agent, but a lot of tools support TCP syslog instead of UDP.