index_name ${tag} #.%Y-%m-%d
    type_name syslog
    time_key @timestamp
    include_timestamp true
    reload_on_failure true
    reconnect_on_error true
    with_transporter_log true
    reload_connections false
    <buffer tag, time>
        @type memory # or file
        flush_mode interval
        flush_interval 1m
        flush_thread_count 4
        timekey 1d
    </buffer>