add rsyslog forwarder config /issue #218