| file_match: '(?P<Service>daemon\.log|cron\.log|mail\.log|kern\.log|auth\.log|syslog|messages|debug)\.?(?P<Index>\d+)?(.gz)?' |
| differentiator: [ "rsyslog-", "Service" ] |
| template: \%TIMESTAMP\% \%HOSTNAME\% \%syslogtag\%\%msg:::sp-if-no-1st-sp\%\%msg:::drop-last-lf\%\n |
| tz: ${linux:system:timezone} |
| host: ${_param:heka_shipper_output_host} |
| user: ${_param:heka_shipper_output_user} |
| password: ${_param:heka_shipper_output_password} |
| vhost: ${_param:heka_shipper_output_vhost} |
| exchange: ${_param:heka_shipper_output_exchange} |