This is a log-consolidation scenario. There exist at least two systems, a server and at least one client. The server is meant to gather log data from all the clients. Clients may (or may not) process and store messages locally. If they do, doesn’t matter here. See recipe Sending Messages to a Remote Syslog Server for how to configure the clients. Messages from remote hosts in the 192.0.1.x network
![Storing Messages from a Remote System into a specific File - rsyslog](https://cdn-ak-scissors.b.st-hatena.com/image/square/2bddaa826b5c95ab231a5eabe3c2224b9d855767/height=288;version=1;width=512/https%3A%2F%2Fwww.rsyslog.com%2Ffiles%2F2018%2F02%2Frsyslog-logo-512x512.png)