destination system_log_remote_syslog { network("IP Address Goes Here" port(514) transport(udp));};log { source(s_all); filter(f_local_system); destination(system_log_remote_syslog);};