lede_packages/net/rsyslog/files/rsyslog.conf

module(load="imuxsock")
module(load="imklog")
module(load="imudp")
input(type="imudp" port="514")
#module(load="imtcp")
#input(type="imtcp" port="514")

$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat

*.info;mail.none;authpriv.none;cron.none  /var/log/messages

authpriv.*                                /var/log/secure

mail.*                                    /var/log/maillog

cron.*                                    /var/log/cron

local7.*                                  /var/log/boot.log