anchor.diff:  +
   ----
   <store>
  -@type <tpye> <1>
  +@type <type> <1>
   remote_syslog <syslog-server> <2>
   port 514 <3>
   hostname <host> <4>
  
positive.code: severity <value>
  use_record <value>
  payload_key message
  rfc 3164 <6> 
  </store>
  ----
  <1> Specify the protocol to use, either: `syslog` or `syslog_buffered`. 
  <2> Specify the FQDN or IP address of the syslog server.
  <3> Specify the port of the syslog server.
  <4> Specify a name for this syslog server.
  
negative.code: @type syslog_buffered
  remote_syslog rsyslogserver.example.com
  port 514
  hostname ${hostname}
  remove_tag_prefix tag
  facility local0
  severity info
  