Eye/docs/syslog-ng/eye.conf

#add to main config
#options {
#time_reopen (10); log_fifo_size (1000); chain_hostnames (off); create_dirs (yes); keep_hostname (no);
#};

source s_remote { udp(port(514)); };

destination d_socket {
pipe("/run/syslog-ng.socket" template("$UNIXTIME|$SOURCEIP|$MSGHDR $MESSAGE\n") template-escape(yes) flags(no-multi-line) perm(0600) owner("eye") group("eye"));
};

destination d_all { file("/var/log/remote/$R_YEAR/$R_MONTH/$R_YEAR-$R_MONTH-$R_DAY.log" flags(no-multi-line)); };

destination d_all_simple {
file("/var/log/remote/messages.log" template("$UNIXTIME|$SOURCEIP|$MSGHDR $MESSAGE\n") template-escape(yes) flags(no-multi-line));
};

log { source(s_remote); destination(d_all); };
log { source(s_remote); destination(d_all_simple); };
log { source(s_remote); destination(d_socket); };