anchor.diff:  </store>
   ----
   
  -You can configure the following `syslog` parameters. For more information, see the syslog link:https://tools.ietf.org/html/rfc3164[RFC3164]. 
  +You can configure the following `syslog` parameters. For more information, see the syslog link:https://tools.ietf.org/html/rfc3164[RFC3164].
   
   * facility: The link:https://tools.ietf.org/html/rfc3164#section-4.1.1[syslog facility]. The value can be a decimal integer or a case-insensitive keyword:
   ** `0` or `kern` for kernel messages
  
positive.code: severity <value>
  use_record <value>
  payload_key message
  rfc 3164 <6> 
  </store>
  ----
  <1> Specify the protocol to use, either: `syslog` or `syslog_buffered`. 
  <2> Specify the FQDN or IP address of the syslog server.
  <3> Specify the port of the syslog server.
  <4> Specify a name for this syslog server.
  
negative.code: @type syslog_buffered
  remote_syslog rsyslogserver.example.com
  port 514
  hostname ${hostname}
  remove_tag_prefix tag
  facility local0
  severity info
  