$umask 0027 $WorkDirectory /var/spool/rsyslog module(load="imuxsock") # provides support for local system logging module(load="imklog") # provides kernel logging support module(load="builtin:omfile" fileOwner="root" fileGroup="syslog" fileCreateMode="0640") template(name="logline" type="list") { property(name="timestamp" dateFormat="rfc3339") constant(value="\t") property(name="syslogseverity-text") constant(value="\t") property(name="syslogfacility-text") constant(value="\t") property(name="programname") constant(value="\t") property(name="procid") constant(value="\t") property(name="structured-data") constant(value="\t") property(name="msg") constant(value="\n") } template(name="logpath" type="string" string="/var/log/%$year%/%$now%") action(type="omfile" dynaFile="logpath" template="logline") $IncludeConfig /etc/rsyslog.d/*.conf