/etc/rsyslog.d/10-remotesyslog.conf: file.managed: - contents: "*.* @@10.55.55.55:514" rsyslog: service.running: - enable: true - restart: true - watch: - /etc/rsyslog.d/10-remotesyslog.conf