server:
--snip-- $ModLoad imudp $UDPServerAddress 10.5.0.70 $UDPServerRun 5140 --snip--
client
--snip-- #### custom RULES #### auth,authpriv.* /var/log/auth.log auth,authpriv.* ~ *.* @10.5.0.70:5140 if $syslogfacility-text == 'local6' and $programname == 'apache2' then /var/rlog/httpd-access.log if $syslogfacility-text == 'local6' and $programname == 'apache2' then ~ if $syslogfacility-text == 'local7' and $programname == 'apache2' then /var/rlog/httpd-error.log if $syslogfacility-text == 'local7' and $programname == 'apache2' then ~ $IncludeConfig /etc/rsyslog.d/*.conf #### RULES #### # # First some standard log files. Log by facility. # *.*;auth,authpriv.none -/var/log/syslog #cron.* /var/log/cron.log daemon.* -/var/log/daemon.log kern.* -/var/log/kern.log lpr.* -/var/log/lpr.log mail.* -/var/log/mail.log user.* -/var/log/user.log