# Accept remote syslog (UDP/TCP 514) module(load="imudp") input(type="imudp" port="514") module(load="imtcp") input(type="imtcp" port="514") # Prefer FQDN derived from sender IP (reverse DNS), not whatever the sender claims global( preserveFQDN="on" net.enableDNS="on" ) # Write to /prole/logs/{fqdn}/{program}.log template(name="PerHostLogs" type="string" string="/prole/logs/%HOSTNAME%/%programname%.log"); *.* action( type="omfile" dynaFile="PerHostLogs" createDirs="on" dirCreateMode="02775" fileCreateMode="0640" dirGroup="prole" fileGroup="prole" ) & stop