The syslog-ng Administrator Guide

During installation, syslog-ng agent registers the LogRelay service that is started automatically when the host boots. To disable the automatic startup of the syslog-ng agent, or manually start or stop the service, use the Start Menu > Control Panel > Administrative Tools > Services interface. The service is running with the privileges of the NT AUTHORITY\SYSTEM user.

	Warning
	If you change the timezone setting of the host while the syslog-ng Agent is running, you have to restart the syslog-ng Agent. Otherwise, it will not receive the updated timezone information and the date of the events will be incorrect.