I've been trying to configure rsyslog to forward /var/log/syslog to a remote server. I was able to do this using the below configuration.
This does forward /var/log/secure but I actually end up with two logs on the remote server. One tagged from localhost and one tagged from the hostname of the machine, which uses the FileTag specified above.
What do I need to add or remove to forward this log file to a remote machine with the FQDN and FileTag intact without also including a second copy from localhost?