Syslog.conf woes

Question

I have configured my /etc/syslog.conf to split up my whole-house central logs, however I am missing something.  All log files are getting all the data.  I had this perfect last week, did a restore, and had to re-author it and am getting super fustrated.  All the docs are so conflicting so I'm looking for someone to just smack me in the right direction
# /etc/syslog.conf
+switch1.mydomain
*.*             /var/log/mydomain/switch1.mydomain
+switch2.mydomain
*.*             /var/log/mydomain/switch2.mydomain
========
-rw-r--r--   1 root  wheel  1946 May  6 09:22 switch1.mydomain
-rw-r--r--   1 root  wheel  1946 May  6 09:22 switch2.mydomain
                                   ^^^^^
      All logs are going to all files. 
Some folks say put a +* after the *.*  or a ! or a *+ or a this or a that.
What is the correct answer?
While you're here, what is the appropriate syntax to have a master file, based upon ip subnet
+1.2.3.*
*.* /var/log/myfile
and how do I filter myself (the mac)
+1.2.3.* but filter 1.2.3.10
*.* /var/log/myfile

Answer 1

Obviously since I had stuff streaming to syslog, I had already put that there.
I have plutil whatnot -binary1.  So the config files, I converted to xml, edited, restored to binary, ran the things you are suposed to run.  I have since done several clean reboots.
The current question is why do I have this all configured properly, however acl.conf is being basically ignored?
> plutil -convert xml1 /System/Library/LaunchDaemons/com.apple.syslogd.plist
> pico /System/Library/LaunchDaemons/com.apple.syslogd.plist
> plutil -convert binary1 /System/Library/LaunchDaemons/com.apple.syslogd.plist
> launchctl unload /System/Library/LaunchDaemons/com.apple.syslogd.plist
> launchctl load /System/Library/LaunchDaemons/com.apple.syslogd.plist
===============
== /System/Library/LaunchDaemons/com.apple.syslogd.plist
===============
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
        <key>EnableTransactions</key>
        <true/>
        <key>EnvironmentVariables</key>
        <dict>
                <key>ASL_DISABLE</key>
                <string>1</string>
        </dict>
        <key>HopefullyExitsLast</key>
        <true/>
        <key>JetsamProperties</key>
        <dict>
                <key>JetsamMemoryLimit</key>
                <integer>300</integer>
                <key>JetsamPriority</key>
                <integer>-49</integer>
        </dict>
        <key>Label</key>
        <string>com.apple.syslogd</string>
        <key>MachServices</key>
        <dict>
                <key>com.apple.system.logger</key>
                <dict>
                        <key>ResetAtClose</key>
                        <true/>
                </dict>
        </dict>
        <key>OnDemand</key>
        <false/>
        <key>ProgramArguments</key>
        <array>
                <string>/usr/sbin/syslogd</string>
                <string>-bsd_out</string>
                <string>1</string>
        </array>
        <key>Sockets</key>
        <dict>
                <key>AppleSystemLogger</key>
                <dict>
                        <key>SockPathMode</key>
                        <integer>438</integer>
                        <key>SockPathName</key>
                        <string>/var/run/asl_input</string>
                </dict>
                <key>BSDSystemLogger</key>
                <dict>
                        <key>SockPathMode</key>
                        <integer>438</integer>
                        <key>SockPathName</key>
                        <string>/var/run/syslog</string>
                        <key>SockType</key>
                        <string>dgram</string>
                </dict>
                <key>NetworkListener</key>
                <dict>
                        <key>SockServiceName</key>
                        <string>syslog</string>
                        <key>SockType</key>
                        <string>dgram</string>
                </dict>
        </dict>
</dict>
</plist>
===============
=== /etc/syslog.conf
===============
bash-3.2# cat /etc/syslog.conf
# Note that flat file logs are now configured in /etc/asl.conf
install.*                                               @127.0.0.1:32376
local6.warn                                             /Library/Logs/Mail/mailaccess.log
=============
=== /etc/asl.conf
=============
# Mail access log facility
? [= Facility dovecot] [<= Level info] file /Library/Logs/Mail/mailaccess.log mode=0640 uid=214 gid=6 format=bsd
     ======= [Standard file above here] ==========
     ===== mydomain is actually a FQDN that I redacted
     ====================================
# example showing how everything above this is out-of-the box standard...  My stuff @ the end of asl.conf
#mydomain
? [= Host core1.mydomain] file /var/log/mydomain/core1.mydomain
? [= Host switch1.mydomain] file /var/log/mydomain/switch1.mydomain
? [= Host switch2.mydomain] file /var/log/mydomain/switch2.mydomain
? [= Host wirelessu.mydomain] file /var/log/mydomain/wirelessu.mydomain
? [= Host wirelessd.mydomain] file /var/log/mydomain/wirelessd.mydomain
? [= Host air1.mydomain] file /var/log/mydomain/air1.mydomain
? [= Host cap1.mydomain] file /var/log/mydomain/cap1.mydomain
? [= Host tv1.mydomain] file /var/log/mydomain/tv1.mydomain
? [Z= Host .mydomain] file /var/log/mydomain/mydomain aslmanager_debug=1
===============
== bash-3.2# ls -la /var/log/mydomain/
===============
total 0
drwxr-xr-x  11 root  wheel   374 May  6 11:02 .
drwxr-xr-x  69 root  wheel  2346 May  6 11:31 ..
-rw-r--r--   1 root  wheel     0 May  6 11:02 air1.mydomain
-rw-r--r--   1 root  wheel     0 May  6 11:02 cap1.mydomain
-rw-r--r--   1 root  wheel     0 May  6 11:02 core1.mydomain
-rw-r--r--   1 root  wheel     0 May  6 11:02 mydomain
-rw-r--r--   1 root  wheel     0 May  6 11:02 switch1.mydomain
-rw-r--r--   1 root  wheel     0 May  6 11:02 switch2.mydomain
-rw-r--r--   1 root  wheel     0 May  6 11:02 tv1.mydomain
-rw-r--r--   1 root  wheel     0 May  6 11:02 wirelessd.mydomain
-rw-r--r--   1 root  wheel     0 May  6 11:02 wirelessu.mydomain
Recap...
When I edit syslog.conf, I was getting my data, however my understanding of syslog is way too advanced - this - that - huge arrays of syslog servers - ngsyslog - logrotate - newsyslog - the works.. but when I edit the OG classic BSD format, I fail with the !'s and +'s... so I was asking for help there.  Also I tried to do asl.conf first, and that gave me 0 byte files.  I did proove that I am getting syslog data and routing it when using syslog.conf, just due to my borked config, all logs were going to all files.  So now I rolled that back and am just using asl.conf, but I get no logs.