参考:http://blog.sina.com.cn/s/blog_4c86552f0102y11t.html

rsyslog配置文件/etc/rsyslog.conf: $ModLoad immark //日志标签功能 $ModLoad imudp $UDPServerRun 514 $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat $ActionFileEnableSync on 底部增加配置:

$template IpTemplate,"/var/log/syslog/%FROMHOST-IP%/%$year%-%$month%-%$day%.log" 星.星 ?IpTemplate

启动: systemctl start rsyslog

日志存放路径:/var/log/syslog