## On server host using rsyslog:
cat <<"EOF" > /etc/rsyslog.d/remote.conf
# provides UDP syslog reception
module(load="imudp")
input(type="imudp" port="514")
# provides TCP syslog reception
module(load="imtcp")
input(type="imtcp" port="514")
$AllowedSender UDP, 192.168.0.100/32
$AllowedSender TCP, 192.168.0.100/32
$EscapecontrolCharactersOnReceive off
$template LogFormat,"[%timegenerated:::date-rfc3339%] %syslogtag% %msg%
"
$template RemoteLogs,"/var/log/remote/%HOSTNAME%/%PROGRAMNAME%"
if $fromhost-ip startswith '192.168.0.100' then {
if $hostname == 'yukon' then {
#?:source, isequal, "localhost" ~
*.* ?RemoteLogs;LogFormat
}
EOF## On client using syslog.ng:
cat <<"EOF" > /etc/syslog-ng/conf.d/commgr-remote.conf
log { source(s_src); filter(f_commgr); destination(d_net); };
EOF