role::syslog::centralserver is now applied to centrallog2002, and the puppet run is clean after rebuilding/copying the above packages
Next steps will be to enable anycast on the routers and copy over the log history from centrallog2001.
Centrallog2002 is now the codfw syslog TLS destination. Logs archives from centrallog2001 have been copied over, and the partial logs for today when the switchover happened are now being copied into /srv/syslog/00-partial_logs.
I see logs still arriving to centrallog2001 6514/TCP from cloudbackup1001-dev, and restbase-dev hosts. These hosts have puppet disabled and will switch over on the next puppet run.