Attached is the document describing a simplified approach to enable CPLog to Syslog forwarding for R80 managed environments.
This solution will work for Security Management server. for MDS, it is slightly different. Please see referenced SKs for expanded information.
Note that the execution of the manual stop and start for the CPLogToSyslog described in SKs, (not using watchdog commands), may prevent service from starting properly.