syslog-ng snippet

gistfile1.txt

source remote_syslog {
    syslog(ip("10.1.1.1")
    transport(udp) 
    port(514) 
    so_rcvbuf(8388608) 
    log-iw-size(512000) 
    log-fetch-limit(2000)
);
destination syslog_log { 
  file("/var/log/syslog/$HOST/$FACILITY/$YEAR$MONTH/$YEAR$MONTH$DAY-$FACILITY.log" 
    owner(root) 
    group(root) 
    perm(0600) 
    dir_perm(0700) 
    create_dirs(yes)
  );
};
log {
  source(remote_syslog); 
  destination(syslog_log); 
};