diff --git a/roles/core/rsyslog/files/default.conf b/roles/core/rsyslog/files/default.conf
new file mode 100644
--- /dev/null
+++ b/roles/core/rsyslog/files/default.conf
@@ -0,0 +1,68 @@
+#  Default rules for rsyslog.
+#
+#			For more information see rsyslog.conf(5) and /etc/rsyslog.conf
+
+#
+# First some standard log files.  Log by facility.
+#
+auth,authpriv.*			/var/log/auth.log
+*.*;auth,authpriv.none		-/var/log/syslog
+#cron.*				/var/log/cron.log
+#daemon.*			-/var/log/daemon.log
+kern.*				-/var/log/kern.log
+#lpr.*				-/var/log/lpr.log
+mail.*				-/var/log/mail.log
+#user.*				-/var/log/user.log
+
+#
+# Logging for the mail system.  Split it up so that
+# it is easy to write scripts to parse these files.
+#
+#mail.info			-/var/log/mail.info
+#mail.warn			-/var/log/mail.warn
+mail.err			/var/log/mail.err
+
+#
+# Logging for INN news system.
+#
+news.crit			/var/log/news/news.crit
+news.err			/var/log/news/news.err
+news.notice			-/var/log/news/news.notice
+
+#
+# Some "catch-all" log files.
+#
+#*.=debug;\
+#	auth,authpriv.none;\
+#	news.none;mail.none	-/var/log/debug
+#*.=info;*.=notice;*.=warn;\
+#	auth,authpriv.none;\
+#	cron,daemon.none;\
+#	mail,news.none		-/var/log/messages
+
+#
+# Emergencies are sent to everybody logged in.
+#
+*.emerg                                :omusrmsg:*
+
+#
+# I like to have messages displayed on the console, but only on a virtual
+# console I usually leave idle.
+#
+#daemon,mail.*;\
+#	news.=crit;news.=err;news.=notice;\
+#	*.=debug;*.=info;\
+#	*.=notice;*.=warn	/dev/tty8
+
+# The named pipe /dev/xconsole is for the `xconsole' utility.  To use it,
+# you must invoke `xconsole' with the `-file' option:
+#
+#    $ xconsole -file /dev/xconsole [...]
+#
+# NOTE: adjust the list below, or you'll go crazy if you have a reasonably
+#      busy site..
+#
+#daemon.*;mail.*;\
+#	news.err;\
+#	*.=debug;*.=info;\
+#	*.=notice;*.=warn	|/dev/xconsole
diff --git a/roles/core/rsyslog/init.sls b/roles/core/rsyslog/init.sls
new file mode 100644
--- /dev/null
+++ b/roles/core/rsyslog/init.sls
@@ -0,0 +1,20 @@
+#   -------------------------------------------------------------
+#   Salt — rsyslog
+#   - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+#   Project:        Eglide
+#   Created:        2016-09-11
+#   License:        Trivial work, not eligible to copyright
+#   -------------------------------------------------------------
+
+#   -------------------------------------------------------------
+#   Ensure xconsole pipeline isn't configured
+#
+#   See http://kb.monitorware.com/kbeventdb-detail-id-6925.html
+#   - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+{% if salt['file.directory_exists' ]('/etc/rsyslog.d') %}
+rc:
+  file.managed:
+    - name : /etc/rsyslog.d/50-default.conf
+    - source: salt://roles/core/rsyslog/files/default.conf
+{% endif %}
diff --git a/top.sls b/top.sls
--- a/top.sls
+++ b/top.sls
@@ -12,6 +12,7 @@
     - roles/core/hostname
     - roles/core/network
     - roles/core/motd
+    - roles/core/rsyslog
   'eglide':
     - roles/shellserver/users
     - roles/shellserver/userland-software