When sending logs from the Syslog-ng Agent for Windows using Syslog-IETF format which contains SDATA (Structured Data), the following 2 macros are missing data when no data is present:
${EVENT_PROVIDER} and ${EVENT_SID_TYPE}
By default, if no data is provided by the logs for those macros they should contain "N/A", however, this is missing.