参考:http://blog.sina.com.cn/s/blog_4c86552f0102y11t.html
rsyslog配置文件/etc/rsyslog.conf:
$ModLoad immark //日志标签功能
$ModLoad imudp
$UDPServerRun 514
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$ActionFileEnableSync on
底部增加配置:
$template IpTemplate,"/var/log/syslog/%FROMHOST-IP%/%$year%-%$month%-%$day%.log.log"
. ?IpTemplate
启动:
systemctl start rsyslog
日志存放路径:/var/log/syslog