Greetings! I manage several dozen networks of mixed-OS systems, and among them are a broad variety
of Linux distros. On everything where I have control, I have rsyslog set up just like you're looking for, with
GTLS and CA/cert pairs keeping everything secure.
I can give you the specific steps required and am happy to be available to answer questions if you have
any. (Which you likely will not, once you see how simple it is.)
You'll need to make sure port 6514 is open for TCP but if you need help with that, I can do that, also.
Delivery time is pretty much immediately. Just say the word.
Thanks and look forward to working with you!
-jb