template(name="RemoteHost" type="string" string="/var/log/remote/%FROMHOST%.log") # Remote Logging # log every host in its own directory ruleset(name="remote") { *.* -?RemoteHost } input(type="imudp" port="514" ruleset="remote")