# Directives for listener on UdP and TCP

source s_net { udp(); };
source s_syslog-ng {
        syslog(ip(0.0.0.0) port(514) transport("udp"));
};

# Configuration for EPIC logs
#
source s_net { tcp(); };
source s_syslog-tcp {
        syslog(ip(0.0.0.0) port(514) transport("tcp"));
};

Netstat showing listening.....

/var/log/syslog-ng/splunk/epic-logs/wiki$ sudo netstat -tanpu|grep syslog
tcp        0      0 0.0.0.0:514             0.0.0.0:*               LISTEN      20122/syslog-ng
udp        0      0 0.0.0.0:514             0.0.0.0:*                           20122/syslog-ng