Syslog plugin from remote server

Hello Sam452,
Did you start telegraf before with systemctl start telegraf? If yes and you try to kill its PID the systemd will automatically start it again. So please try stop running telegraf with systemctl stop telegraf and systemctl disable telegraf and after this check 6514 port with netstat. It is not in use you will able to start telegraf “by hand” with:
telegraf --config /etc/telegraf/telegraf.conf