When the syslog server goes down, WF will retry (up to 10 times we believe) to reconnect but will then give up. You can manually force a reconnect by issuing:

/host=master/core-service=management/access=audit/syslog-handler=mysyslog:recycle

This request is to make it possible to automate this and make it configurable at which interval it should try and reconnect