Which Onprem syslog server is best for MCAS Log collection--Required Suggestion

Mdrafik-Shaikh Unless something has changed, you kind of have to run the Docker container to get syslog into MCAS.  It receives syslog and uploads it to MCAS, and I'm not aware of any other products that can directly upload to MCAS.

You don't have to run the image under HyperV, but you do need to run it under Docker, which is its own virtualization hypervisor.  If you don't already have Docker (or Linux) in your environment I can see how it'd be a steep requirement.

It looks like you can run Docker under https://docs.microsoft.com/en-us/windows/wsl/tutorials/wsl-containers, but in the end you're still more or less running a Linux VM that you need to manage and patch.