Syslog Output only transferring the "message" field

You could use a Ruby filter to parse the entire event as json (or key=value) into a field and then use the message field on the syslog output to use the json field you created as the content. On the receiving side you'd parse the json back into a message.

See Logstash-output-syslog full json in message? - #6 by Badger