Comment 1 for bug 1478103

added a branch at lp:~smoser/cloud-init/syslog-rework
that implements much of the above.

then realized cc_rsyslog.conf is present in cloud-init since before 2012.
its config looks like:

#cloud-config
rsyslog:
  - "*.* @@192.158.1.1"
  - content: "*.* @@192.0.2.1:10514"
  - filename: 01-examplecom.conf
    content: |
      *.* @@syslogd.example.com

I'll spend some time monday getting the improved test and systemd restart that i have in my new branch into the older one. Also will support calling the dictionary as 'syslog' rather than rsyslog to be more generic.