Looking at nginx config for codfw servers, I see this:

access_log syslog:server=logstash1001.eqiad.wmnet:10514,facility=local7,tag=wdqs,severity=info logstash;

I assume there should be some codfw server, not eqiad one? So some hiera config is probably missing.