[source::.../var/log/cron.log]
sourcetype = cron
TRANSFORMS = syslog-host

[source::.../var/log/user.log]
sourcetype = syslog
TRANSFORMS = syslog-host

[source::.../var/log/mail.*]
sourcetype = mail
TRANSFORMS = syslog-host

[source::.../var/log/shorewall.log]
sourcetype = firewall
TRANSFORMS = syslog-host

[source::.../var/log/rsnapshot.log]
sourcetype = backups
TRANSFORMS = syslog-host

[source::.../var/log/kern.log]
sourcetype = kernel
TRANSFORMS = syslog-host

#------------------------------------------------------------------------------
# MYSQL
#------------------------------------------------------------------------------
[source::.../var/log/mysql/mysql*]
sourcetype = mysql

#------------------------------------------------------------------------------
# APACHE
#------------------------------------------------------------------------------
[source::.../var/log/apache2/*]
sourcetype = apache

#------------------------------------------------------------------------------
# SECURITY
#------------------------------------------------------------------------------
[source::.../var/log/auth.log]
sourcetype = security
TRANSFORMS = syslog-host

[source::.../var/log/grsec.log]
sourcetype = security
TRANSFORMS = syslog-host

[source::.../var/log/pax.log]
sourcetype = security
TRANSFORMS = syslog-host

[source::.../var/log/audit.log]
sourcetype = security
TRANSFORMS = syslog-host