anchor.diff:  @type syslog_buffered
   remote_syslog rsyslogserver.example.com
   port 514
  -hostname fluentd-4nzfz
  +hostname ${hostname}
   remove_tag_prefix tag
   facility local0
   severity info
  
positive.code: [id="cluster-logging-collector-legacy-syslog_{context}"]
  = Forwarding logs using the legacy syslog method
  
  You can use the *syslog* RFC3164 protocol to send logs to destinations outside of your {product-title} cluster instead of the default Elasticsearch log store by creating a configuration file and ConfigMap. You are responsible for configuring the external log aggregator to receive the logs from {product-title}. 
  
  [IMPORTANT]
  ====
  
negative.code: ** Parameter to  remove the specified `tag` field from the syslog prefix.
  ** Parameter to set the specified field as the syslog key.
  ** Parameter to specify the syslog log facility or source.
  ** Parameter to specify the syslog log severity.
  ** Parameter to use the severity and facility from the record if available. If `true`, the `container_name`, `namespace_name`, and `pod_name` are included in the output content.
  ** Parameter to specify the key to set the payload of the syslog message. Defaults to `message`.
  <6> Specify the RFC protocol to use: `3164`.
  