The relay server is straight rsyslog running on Centos 6.6.
As I stated in the call, we know the hostname is being passed on by the relay because we can see the hostname in the syslog entries if we substitute a third syslog server for the solarwinds LEM server.