diff --git a/scripts/latecommand/buster/etc/rsyslog.conf b/scripts/latecommand/buster/etc/rsyslog.conf
new file mode 100644
index 0000000..31b426b
--- /dev/null
+++ b/scripts/latecommand/buster/etc/rsyslog.conf
@@ -0,0 +1,5 @@
+#
+# Include all config files in /etc/rsyslog.d/
+#
+$IncludeConfig /etc/rsyslog.d/*.conf
+
diff --git a/scripts/latecommand/buster/etc/rsyslog.d/00-global.conf b/scripts/latecommand/buster/etc/rsyslog.d/00-global.conf
new file mode 100644
index 0000000..2d6c565
--- /dev/null
+++ b/scripts/latecommand/buster/etc/rsyslog.d/00-global.conf
@@ -0,0 +1,14 @@
+# This file is managed remotely, all changes will be lost
+
+#
+# Global options
+#
+global(
+  defaultNetstreamDriver="ptcp"
+)
+
+#
+# Use traditional timestamp format.
+# To enable high precision timestamps, comment out the following line.
+#
+$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
diff --git a/scripts/latecommand/buster/etc/rsyslog.d/05-common-defaults.conf b/scripts/latecommand/buster/etc/rsyslog.d/05-common-defaults.conf
new file mode 100644
index 0000000..7e81e59
--- /dev/null
+++ b/scripts/latecommand/buster/etc/rsyslog.d/05-common-defaults.conf
@@ -0,0 +1,22 @@
+# This file is managed remotely, all changes will be lost
+
+#
+# Set default permissions for all log files
+#
+$FileOwner root
+$FileGroup adm
+$FileCreateMode 0640
+$DirCreateMode 0755
+$Umask 0022
+
+
+#
+# Where to place spool and state files
+#
+$WorkDirectory /var/spool/rsyslog
+
+#
+# Log every message
+#
+$RepeatedMsgReduction off
+
diff --git a/scripts/latecommand/buster/etc/rsyslog.d/10-local-modules.conf b/scripts/latecommand/buster/etc/rsyslog.d/10-local-modules.conf
new file mode 100644
index 0000000..1409a03
--- /dev/null
+++ b/scripts/latecommand/buster/etc/rsyslog.d/10-local-modules.conf
@@ -0,0 +1,21 @@
+# This file is managed remotely, all changes will be lost
+
+#
+# Log messages sent to local UNIX socket
+#
+# provides support for local system logging
+module(load="imuxsock")
+
+#
+# Log kernel messages
+#
+# provides kernel logging support
+module(load="imklog" permitnonkernelfacility="on")
+
+#
+# Log periodic -- MARK -- messages
+#
+# provides --MARK-- message capability
+#module(load="immark")
+#module(load="immark" markmessageperiod="3600")
+
diff --git a/scripts/latecommand/buster/etc/rsyslog.d/50-default-rulesets.conf b/scripts/latecommand/buster/etc/rsyslog.d/50-default-rulesets.conf
new file mode 100644
index 0000000..9f13554
--- /dev/null
+++ b/scripts/latecommand/buster/etc/rsyslog.d/50-default-rulesets.conf
@@ -0,0 +1,45 @@
+# This file is managed remotely, all changes will be lost
+
+#
+# Standard log files, split by facility
+#
+auth,authpriv.*                /var/log/auth.log
+*.*;cron,auth,authpriv.none    -/var/log/syslog
+cron.*                         -/var/log/cron.log
+daemon.*                       -/var/log/daemon.log
+kern.*                         -/var/log/kern.log
+lpr.*                          -/var/log/lpr.log
+mail.*                         -/var/log/mail.log
+user.*                         -/var/log/user.log
+
+#
+# Logging for the mail system. Split it up so that
+# it is easy to write scripts to parse these files
+#
+mail.info                      -/var/log/mail.info
+mail.warn                      -/var/log/mail.warn
+mail.err                       /var/log/mail.err
+
+#
+# Logging for INN news system
+#
+news.crit                      /var/log/news/news.crit
+news.err                       /var/log/news/news.err
+news.notice                    -/var/log/news/news.notice
+
+#
+# Some "catch-all" log files
+#
+*.=debug;\
+        auth,authpriv.none;\
+        news.none;mail.none     -/var/log/debug
+*.=info;*.=notice;*.=warn;\
+        auth,authpriv.none;\
+        cron,daemon.none;\
+        mail,news.none          -/var/log/messages
+
+#
+# Emergencies are sent to everybody logged in
+#
+*.emerg                         :omusrmsg:*
+