You can add a file in /etc/rsyslog.d/ with the following to send the syslog traffic to another Ip.
vi /etc/rsyslog.d/40-custonlog.conf
*.* action(type="omfwd" target="10.1.2.6" port="514" protocol="tcp"
action.resumeRetryCount="100"
queue.type="linkedList" queue.size="10000")