When using Transport Layer Security (TLS) for secure syslog transmission, the configuration should specify TCP as the transport protocol because it provides reliable message delivery. The default port for secure syslog over TLS is 6514, not the standard syslog port 514, which is typically used for unencrypted syslog over UDP. References: General knowledge of network security protocols and syslog transportation methods.