Not getting messages to Graylog VM

[JoeSmoe (bob)]

I have an offline graylog (OVA) running. I am using the following config:
Panic Soft
#NoFreeOnExit TRUE

define ROOT C:\Program Files (x86)\nxlog
define CERTDIR %ROOT%\cert
define CONFDIR %ROOT%\conf
define LOGDIR %ROOT%\data
define LOGFILE %LOGDIR%\nxlog.log
LogFile %LOGFILE%

Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data

Module xm_gelf Module xm_charconv AutodetectCharsets iso8859-2, utf-8, utf-16, utf-32 Module xm_exec Module xm_fileop

# Check the size of our log file hourly, rotate if larger than 5MB
<Schedule>
    Every   1 hour
    Exec    if (file_exists('%LOGFILE%') and \
               (file_size('%LOGFILE%') >= 5M)) \
                file_cycle('%LOGFILE%', 8);
</Schedule>

# Rotate our log file every week on Sunday at midnight
<Schedule>
    When    @weekly
    Exec    if file_exists('%LOGFILE%') file_cycle('%LOGFILE%', 8);
</Schedule>

Module im_msvistalog # SavePosition True ReadFromLast True

    Query <QueryList>\
            <Query Id='1'>\
                    <Select Path='Application'>*</Select>\
                    <Select Path='Security'>*</Select>\
                    <Select Path='System'>*</Select>\
            </Query>\
    </QueryList>

Module om_udp Host 192.168.1.189 Port 12204 OutputType GELF Path in => out

my 1st online setup winserver>graylog works fine however the offline setup windows DC > graylog isnt working. the config file is the same on both networks. Am I missing something? I am seeing the messages in ther 10 in /10 out