anchor.diff:  auth,authpriv.*                 /var/log/secure
   <% end -%>
   <% end -%>
  -
  -<% if scope.lookupvar('rsyslog::client::preserve_fqdn') -%>
  -# Tell rsyslog to use FQDN and not short server names
  -$PreserveFQDN on 
  -<% end -%>
  -
   <% if scope.lookupvar('rsyslog::client::log_local') -%>
   <% if scope.lookupvar('rsyslog::log_style') == 'debian' -%>
   # First some standard log files.  Log by facility.
  
positive.code: <% end -%>
  <% end -%>
  <% if scope.lookupvar('rsyslog::client::log_auth_local') or scope.lookupvar('rsyslog::client::log_local') -%>
  <% if scope.lookupvar('rsyslog::client::ssl') -%>
  # Setup SSL connection.
  # CA/Cert
  $DefaultNetStreamDriverCAFile <%= scope.lookupvar('rsyslog::client::ssl_ca') %>
  
  # Connection settings.
  $DefaultNetstreamDriver gtls
  $ActionSendStreamDriverMode 1
  $ActionSendStreamDriverAuthMode anon
  <% end -%>
  
  # Logging locally.
  
  
negative.code: <%= pattern %> <%= protocol %><%= host %>:<%= port %><%= format %>
  <% end -%>
  <% elsif scope.lookupvar('rsyslog::client::log_remote') -%>
  
  # Log to remote syslog server using <%= scope.lookupvar('rsyslog::client::remote_type') %>
  <% if scope.lookupvar('rsyslog::client::remote_type') == 'tcp' -%>
  *.* @@<%= scope.lookupvar('rsyslog::client::server') -%>:<%= scope.lookupvar('rsyslog::client::port') -%>;RSYSLOG_ForwardFormat
  