ls /etc/rsyslog.d/
20-ufw.conf 21-cloudinit.conf 50-default.conf 60-etl.conf postfix.conf
cat /etc/rsyslog.d/60-etl.conf
:syslogtag, isequal, "claims_etl:" /var/log/etl/claims.log
Once you've created that file, you need to:
sudo mkdir /var/log/etl/
sudo touch /var/log/etl/claims.log
sudo chown -R syslog:syslog /var/log/etl/
sudo service rsyslog restart