I need to change the facility of the syslog message going out to a remote syslog server. I am using rsyslog in my system.
I am using the following configuration to forward logs to another syslog server:
Now I would like to change the facility of all the syslog messages which is going to this server as 'user'.
Is it possible to do this?
I am referring the property replacer document . However I am not sure whether I can do that. Please provide some examples too.