We recently found out that we couldn't send TCP data as Syslog because it didn't have the proper header, but streaming it as TCP works perfectly fine. What are the best practices surrounding a native TCP port vs. Syslog?