$DefaultNetstreamDriver gtls

# These are the sample certificates provided with rsyslog.  For
# production use, you will need to generate your own certificates and
# keys.  See /usr/share/doc/rsyslog-docs/rsyslog_tls.html for
# instructions.
#
$DefaultNetstreamDriverCAFile /etc/pki/tls/certs/rsyslog-ca.crt
$DefaultNetstreamDriverCertFile /etc/pki/tls/certs/rsyslog.crt
$DefaultNetstreamDriverKeyFile /etc/pki/tls/private/rsyslog.key

$ModLoad imtcp.so

$InputTCPServerStreamDriverMode 1 # run driver in TLS-only mode
$InputTCPServerStreamDriverAuthMode anon # client is NOT authenticated
$InputTCPServerRun 10514 # start up listener at port 10514