rsyslogd ❡

$ apt install rsyslog

srv ❡

/etc/rsyslogd.conf

# mod

# provides UDP syslog reception
module(load="imudp")
input(type="imudp" port="514")

# provides TCP syslog reception
module(load="imtcp")
input(type="imtcp" port="514")

# add

$AllowedSender UDP, 127.0.0.1, 10.lan.0.0/16, [::1]/128, *.domain.tld, host.domain.tld
$AllowedSender TCP, 127.0.0.1, 10.lan.0.0/16, [::1]/128, *.domain.tld, host.domain.tld

$template RemInputLogs, "/var/log/servers/%FROMHOST-IP%/%PROGRAMNAME%.log"
*.* ?RemInputLogs

test srv ❡

$ rsyslogd -f /etc/rsyslog.conf -N1

use ❡

/etc/rsyslog.d/60-remote-log.conf

# udp
*.* @10.lan.1.1:514

# tcp
*.* @@10.lan.1.1:514

test use ❡

$ logger -t progam "Test log message"