http://www.shencan.net/index.php/2013/06/03/%E5%88%A9%E7%94%A8-rsyslog-%E6%97%A5%E5%BF%97%E5%85%A5%E5%BA%93/