control:
 actionsequence = ( files copy shellcommands editfiles required processes shellcommands.modified_syslog )

editfiles:

    { /etc/syslog-ng/syslog-ng.conf
      HashCommentLinesContaining "/proc/kmsg"
    }

    syslog_server::
      { /etc/syslog-ng/syslog-ng.conf
        AppendIfNoSuchLine 'source s_remote { tcp(); };'
        AppendIfNoSuchLine 'destination d_clients { file("/var/log/HOSTS/$HOST/"); };'
        AppendIfNoSuchLine 'log { source(s_remote); destination(d_clients); };'
        DefineClasses "modified_syslog"
      }
    !syslog_server::
      { /etc/syslog-ng/syslog-ng.conf
        AppendIfNoSuchLine 'source s_local { internal(); unix-stream("/dev/log"); };'
        AppendIfNoSuchLine 'destination d_loghost {tcp("10.1.17.199" port(514));};'
        AppendIfNoSuchLine "log { source(s_local); destination(d_loghost); };"
        DefineClasses "modified_syslog"

shellcommands.modified_syslog:
  "/etc/init.d/syslog-ng restart"