$template FacilityLog,"/data/log/rsyslog/%hostname%/facilities/%syslogfacility-text%.log"
$template SeverityLog,"/data/log/rsyslog/%hostname%/severities/%syslogseverity-text%.log"
$template AppLog,"/data/log/rsyslog/%hostname%/apps/%app-name%.log"
-$template AllLog,"/data/log/rsyslog/all.log"
# Use a verbose logging format
$template LogFormat, "%TIMESTAMP:::date-rfc3339% %HOSTNAME% %syslogtag% %syslogfacility-text%.%syslogseverity-text%%msg:::sp-if-no-1st-sp%%msg:::drop-last-lf%\n"
*.* ?AppLog;LogFormat
# Log all entries in a single file, which is meant to be parsed by logcheck
# (hence the traditional format).
-*.* ?AllLog;RSYSLOG_TraditionalFileFormat
+*.* -/data/log/rsyslog/all.log;RSYSLOG_TraditionalFileFormat
#######################
#### Local logging ####