...

$template LinuxMnemonic,"%timereported% %HOSTNAME% LINUX-%syslogfacility-text%-%syslogseverity%-%syslogtag%%msg%\n"

Example Topology

Image Modified

In the example above all syslog messages received with a facility of local7 will be forwarded to the Primary server at 10.215.1.5.  When this message is forwarded from the poller to the Primary, the poller will insert its own timestamp into the message.

...