Hi,
I was looking in to getting remote syslog logging working with Loki (from the guys from GrafanaLabs). However, their collector (promtail) only supports RFC5424 with octet counted messages.
After some digging, I have found that vyos defaults to RFC3164 format via rSyslog's "omfwd".
I have the correct syntax now for the config that is generated by 'syslog.py' which is working with Loki, and should be working for Telegraf (influx) too.
The following config creates:
```
syslog {
host 10.10.10.10 {
facility all {
level all
protocol tcp
}
port 1514
}
}
```
```
vyos@vyos:/etc/rsyslog.d$ cat vyos-rsyslog.conf
## generated by syslog.py ##
## remote logging
*.* @@10.10.10.10:1514
```
Howver, to get this working. The following config is required;
```
vyos@vyos:/etc/rsyslog.d$ cat vyos-rsyslog.conf
## generated by syslog.py ##
## remote logging
*.* @@(o)10.10.30.22:1514;RSYSLOG_SyslogProtocol23Format
```
I myself am unfamiliar with the vbash, and the structure of vyos's scripts. But if i know where and how, i could even add some commands that adds this as an option.