# Global section
timeout <seconds>
pidfile <path>

sender {
	# Source IP address. Optional.
	source <addr>
	# Local audir directory. Default is /var/audit/dist.
	directory <dir>
	checksum <algorithm>
	compression <algorithm>

	host <name> {
		# Source IP address. Optional.
		source <addr>
		# IP address of the receiver. No default.
		remote <addr>
		# Local audir directory. Default is /var/audit/dist.
		directory <dir>
		checksum <algorithm>
		compression <algorithm>
	}

	# Sending to more than one host might be possible in the future.
}

receiver {
	# Address to listen on. Default is 0.0.0.0.
	listen <addr>
	# Base directory. Default is /var/audit/dist.
	directory <basedir>

	host <name> {
		# Sender address. No default. Must be provided.
		remote <addr>
		# Directory where to store audit trail files received
		# from system <name>. The default is <basedir>/<name>.
		directory <dir>
	}

	host <name> {
		# Sender address. No default. Must be provided.
		remote <addr>
		# Directory where to store audit trail files received
		# from system <name>. The default is <basedir>/<name>.
		directory <dir>
	}
}