# Templates for local and remote logging $template DynLocalZephir, "/var/log/rsyslog/local/zephir/zephir.log" $template DynRemoteZephir, "/var/log/rsyslog/remote/%hostname:::secpath-replace%/zephir/zephir.log" # all messages from localhost go in local branch if $programname isequal 'zephir' and $fromhost-ip isequal '127' then ?DynLocalZephir & stop # all remaining messages go in remote branch :programname, isequal, "zephir" ?DynRemoteZephir & stop