diff --git a/README.md b/README.md
index 433688b..154f575 100644
--- a/README.md
+++ b/README.md
@@ -135,7 +135,7 @@ starts with the computer, before anyone signs in, and that the window then drive
 - **Source rules** for the devices that bend it further: right-click a message, say how that
   device is read (any import format, a regex), fix its hostname, application, clock, severity
   or encoding, and watch its latest messages change before saving — then read the stored
-  history again with it
+  history again with it. Start from a template, save your own, and export them to share
 - **Mutual TLS** where senders must prove who they are
 - **Allowed sources** by IP literal or CIDR (hygiene, not authentication — see the note below)
 - **Per-IP connection cap** so one host cannot occupy every slot
diff --git a/app_sources.go b/app_sources.go
new file mode 100644
index 0000000..fcaef64
--- /dev/null
+++ b/app_sources.go
@@ -0,0 +1,121 @@
+package main
+
+import (
+	"fmt"
+	"io"
+	"os"
+	"strings"
+
+	"github.com/google/uuid"
+
+	"SyslogStudio/internal/models"
+	"SyslogStudio/internal/sources"
+
+	wailsRuntime "github.com/wailsapp/wails/v2/pkg/runtime"
+)
+
+// --- Source rules: templates, and files to share them ------------------------
+//
+// Window-only: the templates are the same everywhere, and a file is read or
+// written where the person sits. Rules read from a file are saved through the
+// Backend like any other, so they reach the service the window drives.
+
+// GetSourceTemplates returns the rules offered to start from: those that
+// come with SyslogStudio, then those this person saved.
+func (a *App) GetSourceTemplates() []models.SourceTemplate {
+	return append(sources.Templates(), a.prefs.LoadSourceTemplates()...)
+}
+
+// SaveSourceTemplate saves a rule's way of reading as one of this person's
+// templates — a new one, or in place of the one with its ID — and returns it.
+// The devices the rule names are not part of it.
+func (a *App) SaveSourceTemplate(t models.SourceTemplate) (models.SourceTemplate, error) {
+	t.Name = strings.TrimSpace(t.Name)
+	t.Rule = t.Rule.AsTemplate()
+	if err := sources.CheckTemplate(t); err != nil {
+		return models.SourceTemplate{}, err
+	}
+	mine := a.prefs.LoadSourceTemplates()
+	replaced := false
+	for i := range mine {
+		if t.ID != "" && mine[i].ID == t.ID {
+			mine[i], replaced = t, true
+		}
+	}
+	if !replaced {
+		t.ID = "mine-" + uuid.NewString()
+		mine = append(mine, t)
+	}
+	a.prefs.SaveSourceTemplates(mine)
+	return t, nil
+}
+
+// DeleteSourceTemplate removes one of this person's templates. The rules
+// started from it keep what they took.
+func (a *App) DeleteSourceTemplate(id string) {
+	mine := a.prefs.LoadSourceTemplates()
+	kept := mine[:0]
+	for _, t := range mine {
+		if t.ID != id {
+			kept = append(kept, t)
+		}
+	}
+	a.prefs.SaveSourceTemplates(kept)
+}
+
+// ExportSourceRules asks where, then writes the rules there, with this
+// person's templates. "" when the person cancelled.
+func (a *App) ExportSourceRules(rules []models.SourceRule) (string, error) {
+	data, err := sources.EncodeFile(rules, a.prefs.LoadSourceTemplates())
+	if err != nil {
+		return "", err
+	}
+	path, err := wailsRuntime.SaveFileDialog(a.ctx, wailsRuntime.SaveDialogOptions{
+		Title:           "Export source rules",
+		DefaultFilename: "syslogstudio-source-rules.json",
+		Filters:         []wailsRuntime.FileFilter{{DisplayName: "Source rules (*.json)", Pattern: "*.json"}},
+	})
+	if err != nil || path == "" {
+		return "", err
+	}
+	if err := os.WriteFile(path, data, 0o644); err != nil {
+		return "", fmt.Errorf("failed to write the rules: %w", err)
+	}
+	return path, nil
+}
+
+// ReadSourceRulesFile asks for a file of exported rules and reads it, every
+// rule and template checked as it would be saved. The templates are added to
+// this person's; the rules are returned, for the window to save — through the
+// Backend, so that they reach the engine it drives. Nothing when the person
+// cancelled.
+func (a *App) ReadSourceRulesFile() (sources.RuleFile, error) {
+	path, err := wailsRuntime.OpenFileDialog(a.ctx, wailsRuntime.OpenDialogOptions{
+		Title:   "Import source rules",
+		Filters: []wailsRuntime.FileFilter{{DisplayName: "Source rules (*.json)", Pattern: "*.json"}},
+	})
+	if err != nil || path == "" {
+		return sources.RuleFile{}, err
+	}
+	f, err := os.Open(path)
+	if err != nil {
+		return sources.RuleFile{}, err
+	}
+	defer f.Close()
+	data, err := io.ReadAll(io.LimitReader(f, sources.MaxFileSize+1))
+	if err != nil {
+		return sources.RuleFile{}, err
+	}
+	file, err := sources.DecodeFile(data)
+	if err != nil {
+		return sources.RuleFile{}, err
+	}
+	for i, t := range file.Templates {
+		saved, err := a.SaveSourceTemplate(t)
+		if err != nil {
+			return sources.RuleFile{}, err
+		}
+		file.Templates[i] = saved
+	}
+	return file, nil
+}
diff --git a/app_sources_test.go b/app_sources_test.go
new file mode 100644
index 0000000..c50a5e7
--- /dev/null
+++ b/app_sources_test.go
@@ -0,0 +1,55 @@
+package main
+
+import (
+	"testing"
+
+	"SyslogStudio/internal/models"
+	"SyslogStudio/internal/sources"
+	"SyslogStudio/internal/storage"
+)
+
+// A person's templates: saved without the devices a rule names, offered after
+// those that come with SyslogStudio, replaced by ID, deleted.
+func TestSourceTemplates_Mine(t *testing.T) {
+	a := newAppIn(storage.NewConfigStoreAt(t.TempDir()))
+	builtIn := len(sources.Templates())
+
+	rule := models.SourceRule{ID: "source-1", Name: "Lobby cameras", Enabled: true,
+		Match:      models.SourceMatch{Sources: []string{"10.10.7.0/24"}},
+		Format:     models.ImportFormat{Mode: models.ImportCustom, Pattern: `^(?P<time>\S+ \S+) \[(?P<level>\w+)\] (?P<msg>.*)$`},
+		NoHostname: true}
+	if _, err := a.SaveSourceTemplate(models.SourceTemplate{Name: "  ", Rule: rule}); err == nil {
+		t.Error("a template with no name was saved")
+	}
+	bad := rule
+	bad.Format.Pattern = "^(no groups)$"
+	if _, err := a.SaveSourceTemplate(models.SourceTemplate{Name: "broken", Rule: bad}); err == nil {
+		t.Error("a template whose pattern names no field was saved")
+	}
+
+	saved, err := a.SaveSourceTemplate(models.SourceTemplate{Name: " NVR export ", Rule: rule})
+	if err != nil {
+		t.Fatal(err)
+	}
+	if saved.ID == "" || saved.Name != "NVR export" || saved.Rule.Match.Sources != nil || saved.Rule.ID != "" ||
+		saved.Rule.Name != "" || saved.Rule.Format.Pattern != rule.Format.Pattern || !saved.Rule.NoHostname {
+		t.Fatalf("saved as %+v", saved)
+	}
+	all := a.GetSourceTemplates()
+	if len(all) != builtIn+1 || all[builtIn].ID != saved.ID {
+		t.Fatalf("offered: %d templates, the last %+v", len(all), all[len(all)-1])
+	}
+
+	saved.Name = "NVR export, v2"
+	if _, err := a.SaveSourceTemplate(saved); err != nil {
+		t.Fatal(err)
+	}
+	if all := a.GetSourceTemplates(); len(all) != builtIn+1 || all[builtIn].Name != "NVR export, v2" {
+		t.Fatalf("replaced: %+v", all[builtIn:])
+	}
+
+	a.DeleteSourceTemplate(saved.ID)
+	if len(a.GetSourceTemplates()) != builtIn {
+		t.Fatal("not deleted")
+	}
+}
diff --git a/docs/USER_GUIDE.md b/docs/USER_GUIDE.md
index 098d033..6f2a505 100644
--- a/docs/USER_GUIDE.md
+++ b/docs/USER_GUIDE.md
@@ -182,7 +182,7 @@ expression with named groups (`time`, `level`, `host`, `app`, `msg`), and the ot
 
 | Setting | What it does |
 |---|---|
-| Hostname | As sent, the address the message came from, or a name you give |
+| Hostname | *As sent*. *It sends none*: the word after an RFC 3164 timestamp is not a hostname but the start of the tag or text, and the hostname is the address it came from. *The address it came from*, replacing whatever was sent. Or a name you give |
 | Application | Replaces the one sent |
 | Severity | *Automatic*: the priority, unless the message declares a level in a field. *Always the priority*. *From the message text*: a level word anywhere in the text wins |
 | Encoding | UTF-8, Windows-1252, ISO-8859-1 or ISO-8859-15, for a device that garbles accents |
@@ -196,6 +196,33 @@ that read a message.
 Rules belong to the engine the window drives: while it drives the system service, they are the
 service's. Installing the service copies the window's rules to it.
 
+#### Templates, and sharing rules
+
+**Start from** in the rule editor fills the format and the corrections from a template, keeping the
+rule's name and addresses. Those that come with SyslogStudio each do one thing the reading as
+received cannot guess:
+
+| Template | What it sets |
+|---|---|
+| Sends no hostname | *It sends none* — routers, switches and appliances that leave it out |
+| Camera or IoT device | *It sends none*, and the severity from the message text |
+| Level in the text | The severity from the message text, for a device with one priority for everything |
+| JSON behind a syslog header | The JSON format, for a container or application logging JSON through syslog |
+| Garbled accents (Windows-1252) | The Windows-1252 encoding |
+| Clock not to be trusted | The arrival time |
+| A format of its own | A regular expression with named groups, to adapt |
+
+**Save as a template…** keeps a rule's way of reading — its format, your regular expression
+included, and its corrections, not its addresses — under a name of your own. Your templates are
+offered in the rule editor and in a file import's **Format** (*From one of your templates*), where
+a format written for a file can be saved as a template too. They stay in this window's settings
+whichever engine it drives, and are listed, to delete, under **Your templates** in Settings >
+Sources.
+
+**Export…** writes the rules and your templates to a JSON file; **Import…** reads one. Imported
+rules are added after yours and **turned off**: the addresses they name are another network's until
+someone has checked them. A file with a rule that would not be saved is refused whole.
+
 #### Messages already stored
 
 Below the rules, **Messages already stored** reads stored messages again from their raw text, with
diff --git a/docs/assets/img/import-format-dark.png b/docs/assets/img/import-format-dark.png
index abb169f..6e1efad 100644
Binary files a/docs/assets/img/import-format-dark.png and b/docs/assets/img/import-format-dark.png differ
diff --git a/docs/assets/img/import-format-light.png b/docs/assets/img/import-format-light.png
index e5721ba..77f92ff 100644
Binary files a/docs/assets/img/import-format-light.png and b/docs/assets/img/import-format-light.png differ
diff --git a/docs/documentation.html b/docs/documentation.html
index 5b79f92..1344542 100644
--- a/docs/documentation.html
+++ b/docs/documentation.html
@@ -161,7 +161,11 @@ <h3>Messages that bend the standard</h3>
         severity, the encoding. Its latest messages are read again at every change, before and
         after side by side, and the rule applies as messages arrive — before the live view, the
         history, the alerts and the routing. Rules are kept in order in
-        <strong>Settings › Sources</strong>, where the messages already stored can be read
+        <strong>Settings › Sources</strong>, exported to a file and imported elsewhere. A rule can
+        start from a template — a device that sends no hostname, a camera, JSON behind a syslog
+        header, garbled accents, a clock nobody set — and its way of reading, a regular
+        expression of your own included, can be saved as a template for the next rule or a file
+        import. The messages already stored can be read
         again from their raw text with the rules as they are now — from every device or from
         one rule's addresses, over the last day, week, month or all of it.
       </p>
diff --git a/frontend/screenshots/bridge/App.js b/frontend/screenshots/bridge/App.js
index f9cfe91..eb6a6cb 100644
--- a/frontend/screenshots/bridge/App.js
+++ b/frontend/screenshots/bridge/App.js
@@ -33,7 +33,7 @@ import {
   IMPORT_PREVIEW,
   SIMULATOR_CONFIG, SIMULATOR_STATUS,
   NETWORK_INTERFACES, CERT_INFO,
-  BACKGROUND_SETTINGS, SYSTEM_SERVICE, SERVICE_LINK, SOURCE_RULES,
+  BACKGROUND_SETTINGS, SYSTEM_SERVICE, SERVICE_LINK, SOURCE_RULES, SOURCE_TEMPLATES,
   BACKUP_CONFIG, BACKUP_STATUS, BACKUP_FILES, BACKUP_LISTING, RECOVERY_KEY,
 } from '../fixtures.js';
 
@@ -96,6 +96,7 @@ let recoveryKey = clone(RECOVERY_KEY);
 let updateConfig = { checkOnStartup: true, channel: 'stable', skippedVersion: '' };
 let closeAction = 'ask';
 let sourceRules = clone(SOURCE_RULES);
+let sourceTemplates = clone(SOURCE_TEMPLATES);
 
 /**
  * What a rule makes of a message, as far as a page can say without the
@@ -362,6 +363,15 @@ const HANDLERS = {
     return Promise.resolve(null);
   },
   TrySourceRule: (rule, samples) => Promise.resolve(trySource(rule, samples || [])),
+  GetSourceTemplates: () => Promise.resolve(clone(sourceTemplates)),
+  SaveSourceTemplate: (t) => {
+    const saved = { ...t, id: t.id || `mine-${Date.now()}` };
+    sourceTemplates = [...sourceTemplates.filter((x) => x.id !== saved.id), saved];
+    return Promise.resolve(clone(saved));
+  },
+  DeleteSourceTemplate: (id) => { sourceTemplates = sourceTemplates.filter((t) => t.id !== id); return Promise.resolve(null); },
+  ExportSourceRules: () => Promise.resolve('C:\\Users\\operator\\Documents\\syslogstudio-source-rules.json'),
+  ReadSourceRulesFile: () => Promise.resolve({ rules: [], templates: [] }),
   // What reading the stored messages again did last: a page cannot do it.
   GetHistoryReread: () => Promise.resolve({ running: false, total: 1284409, read: 1284409, changed: 3216 }),
   RereadHistory: () => Promise.resolve(null),
diff --git a/frontend/screenshots/fixtures.js b/frontend/screenshots/fixtures.js
index 43b4c66..6e0d567 100644
--- a/frontend/screenshots/fixtures.js
+++ b/frontend/screenshots/fixtures.js
@@ -656,6 +656,21 @@ export const BACKUP_LISTING = { files: BACKUP_FILES, problems: [] };
  * sends no hostname. Read the way the engine reads them, as far as a page can
  * pretend to (bridge/App.js, TrySourceRule).
  */
+/** The templates that come with SyslogStudio (sources.Templates), and one saved. */
+export const SOURCE_TEMPLATES = [
+  { id: 'no-hostname', rule: { format: { mode: 'auto' }, noHostname: true } },
+  { id: 'camera', rule: { format: { mode: 'auto' }, noHostname: true, levelFrom: 'message' } },
+  { id: 'level-in-text', rule: { format: { mode: 'auto' }, levelFrom: 'message' } },
+  { id: 'json', rule: { format: { mode: 'json' } } },
+  { id: 'windows-1252', rule: { format: { mode: 'auto' }, encoding: 'windows-1252' } },
+  { id: 'bad-clock', rule: { format: { mode: 'auto' }, arrivalTime: true } },
+  { id: 'own-format', rule: { format: { mode: 'custom', pattern: '^(?P<time>\\S+ \\S+) (?P<level>\\w+) (?P<msg>.*)$' } } },
+  {
+    id: 'mine-lobby', name: 'Lobby cameras (NVR export)',
+    rule: { format: { mode: 'custom', pattern: '^(?P<time>\\S+ \\S+) \\[(?P<level>\\w+)\\] (?P<msg>.*)$' }, noHostname: true },
+  },
+];
+
 export const SOURCE_RULES = [
   {
     id: 'source-forti', name: 'Edge firewall', enabled: true,
diff --git a/frontend/src/components/ImportDialog.svelte b/frontend/src/components/ImportDialog.svelte
index cdb158e..4cbc2e7 100644
--- a/frontend/src/components/ImportDialog.svelte
+++ b/frontend/src/components/ImportDialog.svelte
@@ -27,6 +27,9 @@
     import { pendingImportPath, frozen } from '../lib/stores';
     import { entryFor } from '../lib/formats';
     import FormatFields from './FormatFields.svelte';
+    import SaveTemplate from './SaveTemplate.svelte';
+    import { emptyRule, getSourceTemplates, isOwnTemplate, templatesVersion } from '../lib/sources';
+    import type { SourceTemplate } from '../lib/sources';
 
     // The counts come back keyed by LABEL, while the colours are keyed by
     // severity number. Inverting the label table once is what keeps the two
@@ -44,6 +47,22 @@
         adopted = false;
     }
 
+    // The formats this person saved as templates, from a rule or from here,
+    // and that say more than "automatic".
+    let ownFormats: SourceTemplate[] = [];
+    let ownChosen = '';
+    $: if ($templatesVersion >= 0) getSourceTemplates()
+        .then(t => (ownFormats = t.filter(x => isOwnTemplate(x) && x.rule.format?.mode && x.rule.format.mode !== 'auto')))
+        .catch(() => {});
+
+    function useOwnFormat() {
+        const t = ownFormats.find(x => x.id === ownChosen);
+        if (!t) return;
+        format = { ...t.rule.format, joinContinuations: format.joinContinuations, skipUnmatched: format.skipUnmatched };
+        pickedByHand();
+        refresh();
+    }
+
     let path = '';
     let preview: ImportPreview | null = null;
     let persist = false;
@@ -310,8 +329,22 @@
                     </button>
 
                     {#if showFormat}
+                        {#if ownFormats.length}
+                            <label class="own-format">
+                                <span>{$_('sources.fromTemplate')}</span>
+                                <select bind:value={ownChosen} on:change={useOwnFormat}>
+                                    <option value="">{$_('sources.tplChoose')}</option>
+                                    {#each ownFormats as t (t.id)}<option value={t.id}>{t.name}</option>{/each}
+                                </select>
+                            </label>
+                        {/if}
                         <FormatFields bind:format fileOptions {formatError}
                                       on:pick={pickedByHand} on:change={refresh} />
+                        {#if format.mode !== 'auto'}
+                            <div class="own-format">
+                                <SaveTemplate make={() => ({ ...emptyRule(), format: { ...format, joinContinuations: false, skipUnmatched: false } })} />
+                            </div>
+                        {/if}
                     {/if}
 
                     <label class="check">
@@ -358,6 +391,9 @@
         padding: 16px; display: flex; flex-direction: column; gap: 10px;
         overflow-y: auto;
     }
+    /* Longer than the dialog, it scrolls: nothing in it is squeezed to fit,
+       the file's name and its sample least of all. */
+    .modal-body > :global(*) { flex-shrink: 0; }
     .lead { margin: 0; font-size: 12px; color: var(--text-secondary); line-height: 1.5; }
     .note { margin: 0; font-size: 10px; color: var(--text-secondary); line-height: 1.5; }
     .verdict { margin: 0; font-size: 12px; color: var(--text-primary); line-height: 1.5; }
@@ -421,4 +457,9 @@
     .btn:disabled { opacity: 0.5; cursor: default; }
     .btn.primary { background: var(--accent, #3b82f6); border-color: var(--accent, #3b82f6); color: #fff; }
     .btn.primary:hover:not(:disabled) { background: var(--accent-hover, #2563eb); }
+    .own-format { display: flex; align-items: center; gap: 8px; margin: 6px 0; font-size: 11px; color: var(--text-secondary); }
+    .own-format select {
+        background: var(--bg-primary); color: var(--text-primary);
+        border: 1px solid var(--border-color); border-radius: 4px; padding: 4px 6px; font-size: 12px;
+    }
 </style>
diff --git a/frontend/src/components/SaveTemplate.svelte b/frontend/src/components/SaveTemplate.svelte
new file mode 100644
index 0000000..a171565
--- /dev/null
+++ b/frontend/src/components/SaveTemplate.svelte
@@ -0,0 +1,66 @@
+<script lang="ts">
+    /**
+     * "Save as a template…": a way of reading kept under a name of one's own,
+     * from the rule editor or from a file import's format — offered again in
+     * both. The devices a rule names are not part of it.
+     */
+    import { _ } from 'svelte-i18n';
+    import { toastError, toastSuccess } from '../lib/toast';
+    import { saveSourceTemplate, templatesVersion } from '../lib/sources';
+    import type { SourceRule } from '../lib/sources';
+
+    /** The way of reading to save, as it stands when saved. */
+    export let make: () => SourceRule;
+
+    let naming = false;
+    let name = '';
+    let busy = false;
+
+    async function save() {
+        busy = true;
+        try {
+            await saveSourceTemplate({ id: '', name: name.trim(), rule: make() });
+            templatesVersion.update(v => v + 1);
+            toastSuccess($_('sources.templateSaved'));
+            naming = false;
+            name = '';
+        } catch (e: any) {
+            toastError(e?.message || String(e));
+        } finally {
+            busy = false;
+        }
+    }
+
+    function onKey(e: KeyboardEvent) {
+        if (e.key === 'Enter' && name.trim()) { e.preventDefault(); save(); }
+        // Escape leaves the naming, not the dialog it is in.
+        if (e.key === 'Escape') { e.preventDefault(); e.stopPropagation(); naming = false; }
+    }
+</script>
+
+{#if naming}
+    <span class="naming">
+        <!-- svelte-ignore a11y-autofocus -->
+        <input bind:value={name} placeholder={$_('sources.templateName')} maxlength="200" autofocus on:keydown={onKey} />
+        <button class="btn" on:click={save} disabled={busy || !name.trim()}>{$_('sources.save')}</button>
+        <button class="btn" on:click={() => (naming = false)} disabled={busy}>{$_('sources.cancel')}</button>
+    </span>
+{:else}
+    <button class="btn" on:click={() => (naming = true)}>{$_('sources.saveTemplate')}</button>
+{/if}
+
+<style>
+    .naming { display: inline-flex; align-items: center; gap: 6px; }
+    input {
+        background: var(--bg-primary); color: var(--text-primary);
+        border: 1px solid var(--border-color); border-radius: 4px;
+        padding: 5px 8px; font-size: 12px; width: 200px;
+    }
+    .btn {
+        padding: 5px 12px; font-size: 12px; border-radius: 4px;
+        background: var(--bg-tertiary); color: var(--text-primary);
+        border: 1px solid var(--border-color); cursor: pointer;
+    }
+    .btn:hover:not(:disabled) { background: var(--bg-hover); }
+    .btn:disabled { opacity: 0.5; cursor: default; }
+</style>
diff --git a/frontend/src/components/SourceRuleEditor.svelte b/frontend/src/components/SourceRuleEditor.svelte
index e4b2518..db383fe 100644
--- a/frontend/src/components/SourceRuleEditor.svelte
+++ b/frontend/src/components/SourceRuleEditor.svelte
@@ -14,10 +14,12 @@
     import { activeZone, formatInZone } from '../lib/timezone';
     import { toastError, toastSuccess } from '../lib/toast';
     import FormatFields from './FormatFields.svelte';
+    import SaveTemplate from './SaveTemplate.svelte';
     import {
-        deleteSourceRule, listText, parseList, ruleDraft, rulesVersion, samplesForRule, saveSourceRule, trySourceRule,
+        deleteSourceRule, getSourceTemplates, isOwnTemplate, listText, parseList, ruleDraft, rulesVersion,
+        samplesForRule, saveSourceRule, templateName, templatesVersion, trySourceRule, withTemplate,
     } from '../lib/sources';
-    import type { SourceRule, SourceSample, SourceTrial } from '../lib/sources';
+    import type { SourceRule, SourceSample, SourceTemplate, SourceTrial } from '../lib/sources';
 
     export let rule: SourceRule;
     export let samples: SourceSample[] = [];
@@ -35,8 +37,29 @@
     const openedWith = sourcesText;
     let hostnamesText = listText(rule.match.hostnames);
     let appNamesText = listText(rule.match.appNames);
-    let hostMode: 'sent' | 'source' | 'fixed' =
-        rule.hostnameFromSource ? 'source' : rule.hostname ? 'fixed' : 'sent';
+    type HostMode = 'sent' | 'none' | 'source' | 'fixed';
+    const hostModeOf = (r: SourceRule): HostMode =>
+        r.noHostname ? 'none' : r.hostnameFromSource ? 'source' : r.hostname ? 'fixed' : 'sent';
+    let hostMode: HostMode = hostModeOf(rule);
+
+    // The templates to start from: those that come with SyslogStudio, then
+    // this person's.
+    let templates: SourceTemplate[] = [];
+    let chosen = '';
+    $: builtIn = templates.filter(t => !isOwnTemplate(t));
+    $: mine = templates.filter(isOwnTemplate);
+    $: chosenTemplate = templates.find(t => t.id === chosen);
+    $: if ($templatesVersion >= 0) getSourceTemplates().then(t => (templates = t)).catch(() => {});
+
+    function useTemplate() {
+        const t = templates.find(x => x.id === chosen);
+        if (!t) return;
+        rule = withTemplate(current(), t);
+        rule.levelFrom = rule.levelFrom || '';
+        rule.encoding = rule.encoding || '';
+        hostMode = hostModeOf(rule);
+        retry();
+    }
 
     let trials: SourceTrial[] = [];
     let error = '';
@@ -58,6 +81,7 @@
             },
             hostname: hostMode === 'fixed' ? (rule.hostname || '').trim() : '',
             hostnameFromSource: hostMode === 'source',
+            noHostname: hostMode === 'none',
             format: { ...rule.format, year: rule.format.year || undefined },
         };
     }
@@ -159,6 +183,26 @@
                 </label>
             </div>
 
+            {#if templates.length}
+                <label class="row">
+                    <span class="row-label">{$_('sources.tplStart')}</span>
+                    <select bind:value={chosen} on:change={useTemplate}>
+                        <option value="">{$_('sources.tplChoose')}</option>
+                        <optgroup label={$_('sources.tplBuiltIn')}>
+                            {#each builtIn as t (t.id)}<option value={t.id}>{templateName(t, $_)}</option>{/each}
+                        </optgroup>
+                        {#if mine.length}
+                            <optgroup label={$_('sources.myTemplates')}>
+                                {#each mine as t (t.id)}<option value={t.id}>{templateName(t, $_)}</option>{/each}
+                            </optgroup>
+                        {/if}
+                    </select>
+                </label>
+                {#if chosenTemplate && !isOwnTemplate(chosenTemplate)}
+                    <p class="note">{$_(`sources.templates.${chosenTemplate.id}.hint`)}</p>
+                {/if}
+            {/if}
+
             <h5>{$_('sources.which')}</h5>
             <label class="row">
                 <span class="row-label">{$_('sources.sources')}</span>
@@ -192,6 +236,7 @@
                 <div class="line">
                     <select bind:value={hostMode} on:change={retry}>
                         <option value="sent">{$_('sources.hostSent')}</option>
+                        <option value="none">{$_('sources.hostNone')}</option>
                         <option value="source">{$_('sources.hostSource')}</option>
                         <option value="fixed">{$_('sources.hostFixed')}</option>
                     </select>
@@ -261,6 +306,7 @@
             {#if editing}
                 <button class="btn danger" on:click={remove} disabled={busy}>{$_('sources.delete')}</button>
             {/if}
+            <SaveTemplate make={() => current()} />
             <span class="spacer"></span>
             <button class="btn" on:click={close} disabled={busy}>{$_('sources.cancel')}</button>
             <button class="btn primary" on:click={save} disabled={busy}>{$_('sources.save')}</button>
@@ -290,6 +336,8 @@
         padding: 16px; display: flex; flex-direction: column; gap: 8px;
         overflow-y: auto;
     }
+    /* Longer than the dialog, it scrolls: the preview is not squeezed. */
+    .modal-body > :global(*) { flex-shrink: 0; }
     h5 {
         margin: 8px 0 0; font-size: 11px; font-weight: 600; text-transform: uppercase;
         letter-spacing: 0.04em; color: var(--text-secondary);
diff --git a/frontend/src/components/SourceRules.svelte b/frontend/src/components/SourceRules.svelte
index ea04e9f..83e1f8b 100644
--- a/frontend/src/components/SourceRules.svelte
+++ b/frontend/src/components/SourceRules.svelte
@@ -9,16 +9,21 @@
     import { onMount } from 'svelte';
     import { _ } from 'svelte-i18n';
     import { messages } from '../lib/stores';
-    import { toastError } from '../lib/toast';
+    import { toastError, toastSuccess } from '../lib/toast';
     import { entryFor } from '../lib/formats';
     import {
-        emptyRule, getSourceRules, listText, reorderSourceRules, ruleDraft, rulesVersion, saveSourceRule,
-        samplesForRule, samplesOf,
+        deleteSourceTemplate, emptyRule, exportSourceRules, getSourceRules, getSourceTemplates, isOwnTemplate,
+        listText, readSourceRulesFile, reorderSourceRules, ruleDraft, rulesVersion, saveSourceRule,
+        samplesForRule, samplesOf, templatesVersion,
     } from '../lib/sources';
-    import type { SourceRule } from '../lib/sources';
+    import type { SourceRule, SourceTemplate } from '../lib/sources';
     import RereadHistory from './RereadHistory.svelte';
 
     let rules: SourceRule[] = [];
+    // This person's templates; those that come with SyslogStudio are offered
+    // in the editor, not listed here.
+    let mine: SourceTemplate[] = [];
+    $: if ($templatesVersion >= 0) getSourceTemplates().then(t => (mine = t.filter(isOwnTemplate))).catch(() => {});
 
     async function load() {
         try { rules = await getSourceRules(); } catch (e: any) { toastError(e?.message || String(e)); }
@@ -39,7 +44,8 @@
         const parts: string[] = [];
         if (r.format.mode && r.format.mode !== 'auto') parts.push($_(entryFor(r.format).label));
         if (r.format.timezone) parts.push(r.format.timezone);
-        if (r.hostnameFromSource) parts.push($_('sources.sumHostSource'));
+        if (r.noHostname) parts.push($_('sources.sumNoHost'));
+        else if (r.hostnameFromSource) parts.push($_('sources.sumHostSource'));
         else if (r.hostname) parts.push($_('sources.sumHost', { values: { host: r.hostname } }));
         if (r.appName) parts.push($_('sources.sumApp', { values: { app: r.appName } }));
         if (r.levelFrom === 'priority') parts.push($_('sources.levelPriority'));
@@ -67,6 +73,43 @@
         }
     }
 
+    async function exportAll() {
+        try {
+            const path = await exportSourceRules(rules);
+            if (path) toastSuccess($_('sources.exported', { values: { path } }));
+        } catch (e: any) {
+            toastError(e?.message || String(e));
+        }
+    }
+
+    // A file's rules are added after these, turned off: the addresses they
+    // name are another network's until someone has looked. Its templates are
+    // saved already.
+    async function importFile() {
+        try {
+            const file = await readSourceRulesFile();
+            const brought = file.rules || [];
+            for (const r of brought) await saveSourceRule({ ...r, id: '', enabled: false });
+            if (brought.length || file.templates?.length) {
+                toastSuccess($_('sources.imported', { values: { rules: brought.length, templates: file.templates?.length || 0 } }));
+            }
+            templatesVersion.update(v => v + 1);
+        } catch (e: any) {
+            toastError(e?.message || String(e));
+        }
+        await load();
+    }
+
+    async function forget(t: SourceTemplate) {
+        try {
+            await deleteSourceTemplate(t.id);
+            templatesVersion.update(v => v + 1);
+            toastSuccess($_('sources.templateDeleted'));
+        } catch (e: any) {
+            toastError(e?.message || String(e));
+        }
+    }
+
     async function move(i: number, by: number) {
         const ids = rules.map(r => r.id);
         const j = i + by;
@@ -85,7 +128,11 @@
 
 <div class="head">
     <h4>{$_('sources.rules')}</h4>
-    <button class="action-btn" on:click={add}>{$_('sources.add')}</button>
+    <span class="buttons">
+        <button class="action-btn" on:click={importFile}>{$_('sources.import')}</button>
+        <button class="action-btn" on:click={exportAll} disabled={!rules.length && !mine.length}>{$_('sources.export')}</button>
+        <button class="action-btn" on:click={add}>{$_('sources.add')}</button>
+    </span>
 </div>
 
 {#if rules.length === 0}
@@ -112,6 +159,26 @@
     <p class="muted">{$_('sources.order')}</p>
 {/if}
 
+<div class="templates">
+    <h4>{$_('sources.myTemplates')}</h4>
+    <p class="muted">{$_('sources.myTemplatesHint')}</p>
+    {#if mine.length === 0}
+        <p class="muted">{$_('sources.myTemplatesEmpty')}</p>
+    {:else}
+        <div class="list">
+            {#each mine as t (t.id)}
+                <div class="row">
+                    <div class="what">
+                        <span class="name">{t.name}</span>
+                        <span class="meta">{what(t.rule)}</span>
+                    </div>
+                    <button class="action-btn" on:click={() => forget(t)}>{$_('sources.delete')}</button>
+                </div>
+            {/each}
+        </div>
+    {/if}
+</div>
+
 <RereadHistory {rules} />
 
 <style>
@@ -141,7 +208,12 @@
         background: var(--bg-secondary); color: var(--text-primary);
         border: 1px solid var(--border-color); border-radius: 4px;
     }
-    .action-btn:hover { background: var(--bg-hover); }
+    .action-btn:hover:not(:disabled) { background: var(--bg-hover); }
+    .action-btn:disabled { opacity: 0.5; cursor: default; }
+    .buttons { display: flex; gap: 6px; }
+    .templates { margin-top: 20px; padding-top: 14px; border-top: 1px solid var(--border-color); }
+    .templates h4 { margin-bottom: 4px; }
+    .templates .muted { margin: 0 0 8px; }
     .icon {
         background: none; border: 1px solid var(--border-color); border-radius: 3px;
         color: var(--text-secondary); font-size: 9px; padding: 3px 6px;
diff --git a/frontend/src/lib/i18n/de.json b/frontend/src/lib/i18n/de.json
index 16d117f..4db7107 100644
--- a/frontend/src/lib/i18n/de.json
+++ b/frontend/src/lib/i18n/de.json
@@ -767,7 +767,54 @@
     "rereadRunning": "{read} von {total} Meldungen durchgesehen · {changed} anders gelesen",
     "rereadDone": "Fertig: {read} Meldungen durchgesehen, {changed} anders gelesen.",
     "rereadStopped": "Nach {read} Meldungen angehalten: die {changed} anders gelesenen bleiben so.",
-    "rereadFailed": "Das erneute Lesen wurde abgebrochen: {error}"
+    "rereadFailed": "Das erneute Lesen wurde abgebrochen: {error}",
+    "templates": {
+      "no-hostname": {
+        "name": "Sendet keinen Hostnamen",
+        "hint": "Router, Switches und Appliances ohne Hostnamen: Das Wort nach dem Zeitstempel bleibt in der Meldung, und der Hostname ist die Absenderadresse."
+      },
+      "camera": {
+        "name": "Kamera oder IoT-Gerät",
+        "hint": "Kein Hostname und überall dieselbe Priorität: Der Hostname ist die Absenderadresse, der Schweregrad das Wort dafür im Text."
+      },
+      "level-in-text": {
+        "name": "Schweregrad im Text",
+        "hint": "Dieselbe Priorität für jede Meldung: Der Schweregrad ist das Wort dafür im Text — ERROR, warning, crit…"
+      },
+      "json": {
+        "name": "JSON hinter einem Syslog-Header",
+        "hint": "Ein Container oder eine Anwendung, die JSON über Syslog protokolliert (Docker, Kubernetes): Schweregrad, Zeit, Host und Meldung werden aus dem JSON gelesen."
+      },
+      "windows-1252": {
+        "name": "Verstümmelte Umlaute (Windows-1252)",
+        "hint": "Ein Windows- oder älteres Gerät, das kein UTF-8 sendet: Sein Text wird als Windows-1252 dekodiert."
+      },
+      "bad-clock": {
+        "name": "Unzuverlässige Uhr",
+        "hint": "Ein Gerät, dessen Uhr niemand gestellt hat: Seine Meldungen erhalten die Zeit ihres Eintreffens."
+      },
+      "own-format": {
+        "name": "Ein eigenes Format",
+        "hint": "Ein regulärer Ausdruck mit benannten Gruppen — time, level, host, app, msg — passend zu den Zeilen des Geräts."
+      }
+    },
+    "tplStart": "Ausgehend von",
+    "tplChoose": "Vorlage wählen…",
+    "tplBuiltIn": "Vorlagen",
+    "myTemplates": "Ihre Vorlagen",
+    "myTemplatesHint": "Lesarten, unter einem eigenen Namen gespeichert und beim Schreiben einer Regel sowie beim Dateiimport angeboten. Sie bleiben in den Einstellungen dieses Fensters, egal welche Engine es steuert, und reisen in exportierten Dateien mit.",
+    "myTemplatesEmpty": "Noch keine: Im Editor einer Regel oder im Format eines Dateiimports speichert „Als Vorlage speichern…“ die Lesart.",
+    "saveTemplate": "Als Vorlage speichern…",
+    "templateName": "Name der Vorlage",
+    "templateSaved": "Vorlage gespeichert",
+    "templateDeleted": "Vorlage gelöscht",
+    "fromTemplate": "Aus einer Ihrer Vorlagen",
+    "import": "Importieren…",
+    "export": "Exportieren…",
+    "exported": "Regeln exportiert nach {path}",
+    "imported": "{rules} Regeln importiert, deaktiviert — prüfen Sie ihre Adressen und aktivieren Sie sie dann. {templates} Vorlagen hinzugefügt.",
+    "hostNone": "Sendet keinen: die Absenderadresse",
+    "sumNoHost": "sendet keinen Hostnamen"
   },
   "storage": {
     "custom": "Benutzerdefiniert…",
diff --git a/frontend/src/lib/i18n/en.json b/frontend/src/lib/i18n/en.json
index de2fb53..16a3927 100644
--- a/frontend/src/lib/i18n/en.json
+++ b/frontend/src/lib/i18n/en.json
@@ -767,7 +767,54 @@
     "rereadRunning": "{read} of {total} messages gone through · {changed} read differently",
     "rereadDone": "Done: {read} messages gone through, {changed} read differently.",
     "rereadStopped": "Stopped after {read} messages: the {changed} read differently stay so.",
-    "rereadFailed": "Reading again stopped: {error}"
+    "rereadFailed": "Reading again stopped: {error}",
+    "templates": {
+      "no-hostname": {
+        "name": "Sends no hostname",
+        "hint": "Routers, switches and appliances that leave the hostname out: the word after the timestamp stays in the message, and the hostname is the address it came from."
+      },
+      "camera": {
+        "name": "Camera or IoT device",
+        "hint": "No hostname, and the same priority on everything: the hostname is the address it came from, and the level the word for it in the text."
+      },
+      "level-in-text": {
+        "name": "Level in the text",
+        "hint": "The same priority on every message: the level is the word for it in the text — ERROR, warning, crit…"
+      },
+      "json": {
+        "name": "JSON behind a syslog header",
+        "hint": "A container or an application logging JSON through syslog (Docker, Kubernetes): the level, time, host and message are read from the JSON."
+      },
+      "windows-1252": {
+        "name": "Garbled accents (Windows-1252)",
+        "hint": "A Windows or older device that does not send UTF-8: its text is decoded as Windows-1252."
+      },
+      "bad-clock": {
+        "name": "Clock not to be trusted",
+        "hint": "A device whose clock nobody set: its messages take the time they arrived."
+      },
+      "own-format": {
+        "name": "A format of its own",
+        "hint": "A regular expression with named groups — time, level, host, app, msg — to adapt to the lines of the device."
+      }
+    },
+    "tplStart": "Start from",
+    "tplChoose": "Choose a template…",
+    "tplBuiltIn": "Templates",
+    "myTemplates": "Your templates",
+    "myTemplatesHint": "Ways of reading saved under a name of your own, offered when a rule is written and in a file import. They stay in this window’s settings, whichever engine it drives, and travel in exported files.",
+    "myTemplatesEmpty": "None yet: in a rule’s editor, or in a file import’s format, “Save as a template…” keeps the way of reading.",
+    "saveTemplate": "Save as a template…",
+    "templateName": "Template name",
+    "templateSaved": "Template saved",
+    "templateDeleted": "Template deleted",
+    "fromTemplate": "From one of your templates",
+    "import": "Import…",
+    "export": "Export…",
+    "exported": "Rules exported to {path}",
+    "imported": "{rules} rules imported, turned off — check their addresses, then turn them on. {templates} templates added.",
+    "hostNone": "It sends none: the address it came from",
+    "sumNoHost": "sends no hostname"
   },
   "storage": {
     "custom": "Custom…",
diff --git a/frontend/src/lib/i18n/es.json b/frontend/src/lib/i18n/es.json
index 737970e..3737e3c 100644
--- a/frontend/src/lib/i18n/es.json
+++ b/frontend/src/lib/i18n/es.json
@@ -767,7 +767,54 @@
     "rereadRunning": "{read} de {total} mensajes recorridos · {changed} leídos de otra forma",
     "rereadDone": "Hecho: {read} mensajes recorridos, {changed} leídos de otra forma.",
     "rereadStopped": "Detenido tras {read} mensajes: los {changed} leídos de otra forma se quedan así.",
-    "rereadFailed": "La nueva lectura se detuvo: {error}"
+    "rereadFailed": "La nueva lectura se detuvo: {error}",
+    "templates": {
+      "no-hostname": {
+        "name": "No envía nombre de host",
+        "hint": "Routers, conmutadores y equipos que omiten el nombre de host: la palabra tras la marca de tiempo se queda en el mensaje, y el nombre de host es la dirección de origen."
+      },
+      "camera": {
+        "name": "Cámara o dispositivo IoT",
+        "hint": "Sin nombre de host y con la misma prioridad en todo: el nombre de host es la dirección de origen, y el nivel la palabra que lo indica en el texto."
+      },
+      "level-in-text": {
+        "name": "Nivel en el texto",
+        "hint": "La misma prioridad en todos los mensajes: el nivel es la palabra que lo indica en el texto — ERROR, warning, crit…"
+      },
+      "json": {
+        "name": "JSON tras una cabecera syslog",
+        "hint": "Un contenedor o una aplicación que registra JSON por syslog (Docker, Kubernetes): el nivel, la hora, el host y el mensaje se leen del JSON."
+      },
+      "windows-1252": {
+        "name": "Acentos ilegibles (Windows-1252)",
+        "hint": "Un dispositivo Windows o antiguo que no envía UTF-8: su texto se decodifica como Windows-1252."
+      },
+      "bad-clock": {
+        "name": "Reloj poco fiable",
+        "hint": "Un dispositivo cuyo reloj nadie ha ajustado: sus mensajes toman la hora de llegada."
+      },
+      "own-format": {
+        "name": "Un formato propio",
+        "hint": "Una expresión regular con grupos con nombre — time, level, host, app, msg — que adaptar a las líneas del dispositivo."
+      }
+    },
+    "tplStart": "Partir de",
+    "tplChoose": "Elegir una plantilla…",
+    "tplBuiltIn": "Plantillas",
+    "myTemplates": "Sus plantillas",
+    "myTemplatesHint": "Formas de leer guardadas con un nombre propio, ofrecidas al escribir una regla y al importar un archivo. Se quedan en los ajustes de esta ventana, sea cual sea el motor que maneje, y viajan en los archivos exportados.",
+    "myTemplatesEmpty": "Aún ninguna: en el editor de una regla, o en el formato de una importación de archivo, «Guardar como plantilla…» conserva la forma de leer.",
+    "saveTemplate": "Guardar como plantilla…",
+    "templateName": "Nombre de la plantilla",
+    "templateSaved": "Plantilla guardada",
+    "templateDeleted": "Plantilla eliminada",
+    "fromTemplate": "De una de sus plantillas",
+    "import": "Importar…",
+    "export": "Exportar…",
+    "exported": "Reglas exportadas a {path}",
+    "imported": "{rules} reglas importadas, desactivadas — revise sus direcciones y luego actívelas. {templates} plantillas añadidas.",
+    "hostNone": "No envía ninguno: la dirección de origen",
+    "sumNoHost": "no envía nombre de host"
   },
   "storage": {
     "custom": "Personalizado…",
diff --git a/frontend/src/lib/i18n/fr.json b/frontend/src/lib/i18n/fr.json
index 468e617..7c92c08 100644
--- a/frontend/src/lib/i18n/fr.json
+++ b/frontend/src/lib/i18n/fr.json
@@ -767,7 +767,54 @@
     "rereadRunning": "{read} messages parcourus sur {total} · {changed} lus autrement",
     "rereadDone": "Terminé : {read} messages parcourus, {changed} lus autrement.",
     "rereadStopped": "Arrêté après {read} messages : les {changed} lus autrement le restent.",
-    "rereadFailed": "La relecture s’est arrêtée : {error}"
+    "rereadFailed": "La relecture s’est arrêtée : {error}",
+    "templates": {
+      "no-hostname": {
+        "name": "N’envoie pas de nom d’hôte",
+        "hint": "Routeurs, commutateurs et boîtiers qui omettent le nom d’hôte : le mot qui suit l’horodatage reste dans le message, et le nom d’hôte est l’adresse d’origine."
+      },
+      "camera": {
+        "name": "Caméra ou objet connecté",
+        "hint": "Pas de nom d’hôte, et la même priorité partout : le nom d’hôte est l’adresse d’origine, et le niveau le mot qui le dit dans le texte."
+      },
+      "level-in-text": {
+        "name": "Niveau dans le texte",
+        "hint": "La même priorité sur tous les messages : le niveau est le mot qui le dit dans le texte — ERROR, warning, crit…"
+      },
+      "json": {
+        "name": "JSON derrière un en-tête syslog",
+        "hint": "Un conteneur ou une application qui journalise du JSON via syslog (Docker, Kubernetes) : le niveau, l’heure, l’hôte et le message sont lus dans le JSON."
+      },
+      "windows-1252": {
+        "name": "Accents illisibles (Windows-1252)",
+        "hint": "Un appareil Windows ou ancien qui n’envoie pas d’UTF-8 : son texte est décodé en Windows-1252."
+      },
+      "bad-clock": {
+        "name": "Horloge peu fiable",
+        "hint": "Un appareil dont personne n’a réglé l’horloge : ses messages prennent l’heure de leur arrivée."
+      },
+      "own-format": {
+        "name": "Un format bien à lui",
+        "hint": "Une expression régulière à groupes nommés — time, level, host, app, msg — à adapter aux lignes de l’appareil."
+      }
+    },
+    "tplStart": "Partir de",
+    "tplChoose": "Choisir un modèle…",
+    "tplBuiltIn": "Modèles",
+    "myTemplates": "Vos modèles",
+    "myTemplatesHint": "Des façons de lire enregistrées sous un nom de votre choix, proposées à l’écriture d’une règle et à l’import d’un fichier. Elles restent dans les réglages de cette fenêtre, quel que soit le moteur qu’elle pilote, et voyagent dans les fichiers exportés.",
+    "myTemplatesEmpty": "Aucun pour l’instant : dans l’éditeur d’une règle, ou dans le format d’un import de fichier, « Enregistrer comme modèle… » garde la façon de lire.",
+    "saveTemplate": "Enregistrer comme modèle…",
+    "templateName": "Nom du modèle",
+    "templateSaved": "Modèle enregistré",
+    "templateDeleted": "Modèle supprimé",
+    "fromTemplate": "D’un de vos modèles",
+    "import": "Importer…",
+    "export": "Exporter…",
+    "exported": "Règles exportées dans {path}",
+    "imported": "{rules} règles importées, désactivées — vérifiez leurs adresses, puis activez-les. {templates} modèles ajoutés.",
+    "hostNone": "Il n’en envoie pas : l’adresse d’origine",
+    "sumNoHost": "n’envoie pas de nom d’hôte"
   },
   "storage": {
     "custom": "Personnalisé…",
diff --git a/frontend/src/lib/i18n/it.json b/frontend/src/lib/i18n/it.json
index 1912813..b1d933d 100644
--- a/frontend/src/lib/i18n/it.json
+++ b/frontend/src/lib/i18n/it.json
@@ -767,7 +767,54 @@
     "rereadRunning": "{read} di {total} messaggi esaminati · {changed} letti diversamente",
     "rereadDone": "Fatto: {read} messaggi esaminati, {changed} letti diversamente.",
     "rereadStopped": "Fermato dopo {read} messaggi: i {changed} letti diversamente restano così.",
-    "rereadFailed": "La rilettura si è interrotta: {error}"
+    "rereadFailed": "La rilettura si è interrotta: {error}",
+    "templates": {
+      "no-hostname": {
+        "name": "Non invia il nome host",
+        "hint": "Router, switch e appliance che omettono il nome host: la parola dopo il timestamp resta nel messaggio, e il nome host è l’indirizzo di provenienza."
+      },
+      "camera": {
+        "name": "Telecamera o dispositivo IoT",
+        "hint": "Nessun nome host e la stessa priorità ovunque: il nome host è l’indirizzo di provenienza, e il livello la parola che lo indica nel testo."
+      },
+      "level-in-text": {
+        "name": "Livello nel testo",
+        "hint": "La stessa priorità su ogni messaggio: il livello è la parola che lo indica nel testo — ERROR, warning, crit…"
+      },
+      "json": {
+        "name": "JSON dietro un’intestazione syslog",
+        "hint": "Un container o un’applicazione che registra JSON tramite syslog (Docker, Kubernetes): livello, ora, host e messaggio vengono letti dal JSON."
+      },
+      "windows-1252": {
+        "name": "Accenti illeggibili (Windows-1252)",
+        "hint": "Un dispositivo Windows o datato che non invia UTF-8: il testo viene decodificato come Windows-1252."
+      },
+      "bad-clock": {
+        "name": "Orologio inaffidabile",
+        "hint": "Un dispositivo il cui orologio non è mai stato regolato: i suoi messaggi prendono l’ora di arrivo."
+      },
+      "own-format": {
+        "name": "Un formato tutto suo",
+        "hint": "Un’espressione regolare con gruppi con nome — time, level, host, app, msg — da adattare alle righe del dispositivo."
+      }
+    },
+    "tplStart": "Parti da",
+    "tplChoose": "Scegli un modello…",
+    "tplBuiltIn": "Modelli",
+    "myTemplates": "I tuoi modelli",
+    "myTemplatesHint": "Modi di leggere salvati con un nome a tua scelta, proposti quando si scrive una regola e nell’importazione di un file. Restano nelle impostazioni di questa finestra, qualunque motore piloti, e viaggiano nei file esportati.",
+    "myTemplatesEmpty": "Ancora nessuno: nell’editor di una regola, o nel formato di un’importazione di file, «Salva come modello…» conserva il modo di leggere.",
+    "saveTemplate": "Salva come modello…",
+    "templateName": "Nome del modello",
+    "templateSaved": "Modello salvato",
+    "templateDeleted": "Modello eliminato",
+    "fromTemplate": "Da uno dei tuoi modelli",
+    "import": "Importa…",
+    "export": "Esporta…",
+    "exported": "Regole esportate in {path}",
+    "imported": "{rules} regole importate, disattivate — controlla i loro indirizzi, poi attivale. {templates} modelli aggiunti.",
+    "hostNone": "Non ne invia: l’indirizzo di provenienza",
+    "sumNoHost": "non invia il nome host"
   },
   "storage": {
     "custom": "Personalizzato…",
diff --git a/frontend/src/lib/i18n/ja.json b/frontend/src/lib/i18n/ja.json
index 73df2d2..6688fe1 100644
--- a/frontend/src/lib/i18n/ja.json
+++ b/frontend/src/lib/i18n/ja.json
@@ -767,7 +767,54 @@
     "rereadRunning": "{total} 件中 {read} 件を処理 · {changed} 件の読み方が変化",
     "rereadDone": "完了: {read} 件を処理し、{changed} 件の読み方が変わりました。",
     "rereadStopped": "{read} 件で停止しました。読み方が変わった {changed} 件はそのままです。",
-    "rereadFailed": "読み直しが停止しました: {error}"
+    "rereadFailed": "読み直しが停止しました: {error}",
+    "templates": {
+      "no-hostname": {
+        "name": "ホスト名を送らない",
+        "hint": "ホスト名を省くルーター、スイッチ、アプライアンス向け: タイムスタンプの後の語はメッセージに残し、ホスト名は送信元アドレスにします。"
+      },
+      "camera": {
+        "name": "カメラ / IoT デバイス",
+        "hint": "ホスト名がなく、すべて同じ優先度: ホスト名は送信元アドレス、レベルはテキスト中のレベルを表す語にします。"
+      },
+      "level-in-text": {
+        "name": "テキスト中のレベル",
+        "hint": "すべてのメッセージが同じ優先度: レベルはテキスト中のそれを表す語 (ERROR、warning、crit…) にします。"
+      },
+      "json": {
+        "name": "syslog ヘッダーの後の JSON",
+        "hint": "syslog 経由で JSON を記録するコンテナーやアプリケーション (Docker、Kubernetes): レベル、時刻、ホスト、メッセージを JSON から読み取ります。"
+      },
+      "windows-1252": {
+        "name": "文字化けするアクセント (Windows-1252)",
+        "hint": "UTF-8 を送らない Windows や古いデバイス: テキストを Windows-1252 としてデコードします。"
+      },
+      "bad-clock": {
+        "name": "信頼できない時計",
+        "hint": "時計が設定されていないデバイス: メッセージには到着時刻を使います。"
+      },
+      "own-format": {
+        "name": "独自の形式",
+        "hint": "名前付きグループ (time、level、host、app、msg) を持つ正規表現。デバイスの行に合わせて調整します。"
+      }
+    },
+    "tplStart": "開始点",
+    "tplChoose": "テンプレートを選択…",
+    "tplBuiltIn": "テンプレート",
+    "myTemplates": "マイテンプレート",
+    "myTemplatesHint": "任意の名前で保存した読み方。ルールの作成時とファイルのインポート時に表示されます。このウィンドウの設定に保存され、どのエンジンを操作していても使え、エクスポートしたファイルにも含まれます。",
+    "myTemplatesEmpty": "まだありません: ルールのエディター、またはファイルのインポートの形式で「テンプレートとして保存…」を使うと読み方を保存できます。",
+    "saveTemplate": "テンプレートとして保存…",
+    "templateName": "テンプレート名",
+    "templateSaved": "テンプレートを保存しました",
+    "templateDeleted": "テンプレートを削除しました",
+    "fromTemplate": "マイテンプレートから",
+    "import": "インポート…",
+    "export": "エクスポート…",
+    "exported": "ルールを {path} にエクスポートしました",
+    "imported": "{rules} 件のルールを無効のままインポートしました。アドレスを確認してから有効にしてください。テンプレートを {templates} 件追加しました。",
+    "hostNone": "送らない: 送信元アドレス",
+    "sumNoHost": "ホスト名を送らない"
   },
   "storage": {
     "custom": "カスタム…",
diff --git a/frontend/src/lib/i18n/pt.json b/frontend/src/lib/i18n/pt.json
index b20289f..0d6609a 100644
--- a/frontend/src/lib/i18n/pt.json
+++ b/frontend/src/lib/i18n/pt.json
@@ -767,7 +767,54 @@
     "rereadRunning": "{read} de {total} mensagens percorridas · {changed} lidas de outra forma",
     "rereadDone": "Concluído: {read} mensagens percorridas, {changed} lidas de outra forma.",
     "rereadStopped": "Parado após {read} mensagens: as {changed} lidas de outra forma ficam assim.",
-    "rereadFailed": "A nova leitura parou: {error}"
+    "rereadFailed": "A nova leitura parou: {error}",
+    "templates": {
+      "no-hostname": {
+        "name": "Não envia nome de host",
+        "hint": "Routers, switches e equipamentos que omitem o nome de host: a palavra após o carimbo de tempo fica na mensagem, e o nome de host é o endereço de origem."
+      },
+      "camera": {
+        "name": "Câmara ou dispositivo IoT",
+        "hint": "Sem nome de host e com a mesma prioridade em tudo: o nome de host é o endereço de origem, e o nível a palavra que o indica no texto."
+      },
+      "level-in-text": {
+        "name": "Nível no texto",
+        "hint": "A mesma prioridade em todas as mensagens: o nível é a palavra que o indica no texto — ERROR, warning, crit…"
+      },
+      "json": {
+        "name": "JSON atrás de um cabeçalho syslog",
+        "hint": "Um contentor ou uma aplicação que regista JSON por syslog (Docker, Kubernetes): o nível, a hora, o host e a mensagem são lidos do JSON."
+      },
+      "windows-1252": {
+        "name": "Acentos ilegíveis (Windows-1252)",
+        "hint": "Um dispositivo Windows ou antigo que não envia UTF-8: o texto é descodificado como Windows-1252."
+      },
+      "bad-clock": {
+        "name": "Relógio pouco fiável",
+        "hint": "Um dispositivo cujo relógio ninguém acertou: as mensagens tomam a hora de chegada."
+      },
+      "own-format": {
+        "name": "Um formato próprio",
+        "hint": "Uma expressão regular com grupos nomeados — time, level, host, app, msg — a adaptar às linhas do dispositivo."
+      }
+    },
+    "tplStart": "Partir de",
+    "tplChoose": "Escolher um modelo…",
+    "tplBuiltIn": "Modelos",
+    "myTemplates": "Os seus modelos",
+    "myTemplatesHint": "Formas de ler guardadas com um nome à sua escolha, oferecidas ao escrever uma regra e ao importar um ficheiro. Ficam nas definições desta janela, seja qual for o motor que comanda, e viajam nos ficheiros exportados.",
+    "myTemplatesEmpty": "Ainda nenhum: no editor de uma regra, ou no formato de uma importação de ficheiro, «Guardar como modelo…» guarda a forma de ler.",
+    "saveTemplate": "Guardar como modelo…",
+    "templateName": "Nome do modelo",
+    "templateSaved": "Modelo guardado",
+    "templateDeleted": "Modelo eliminado",
+    "fromTemplate": "De um dos seus modelos",
+    "import": "Importar…",
+    "export": "Exportar…",
+    "exported": "Regras exportadas para {path}",
+    "imported": "{rules} regras importadas, desativadas — verifique os endereços e depois ative-as. {templates} modelos adicionados.",
+    "hostNone": "Não envia nenhum: o endereço de origem",
+    "sumNoHost": "não envia nome de host"
   },
   "storage": {
     "custom": "Personalizado…",
diff --git a/frontend/src/lib/i18n/zh.json b/frontend/src/lib/i18n/zh.json
index d577e07..581b02d 100644
--- a/frontend/src/lib/i18n/zh.json
+++ b/frontend/src/lib/i18n/zh.json
@@ -767,7 +767,54 @@
     "rereadRunning": "已处理 {read}/{total} 条消息 · {changed} 条读取结果有变化",
     "rereadDone": "完成：已处理 {read} 条消息，{changed} 条读取结果有变化。",
     "rereadStopped": "在 {read} 条消息后停止：已变化的 {changed} 条保持不变。",
-    "rereadFailed": "重新读取已停止：{error}"
+    "rereadFailed": "重新读取已停止：{error}",
+    "templates": {
+      "no-hostname": {
+        "name": "不发送主机名",
+        "hint": "省略主机名的路由器、交换机和设备：时间戳后的词保留在消息中，主机名取来源地址。"
+      },
+      "camera": {
+        "name": "摄像头或物联网设备",
+        "hint": "没有主机名，且所有消息优先级相同：主机名取来源地址，级别取文本中表示级别的词。"
+      },
+      "level-in-text": {
+        "name": "文本中的级别",
+        "hint": "所有消息优先级相同：级别取文本中表示级别的词 — ERROR、warning、crit…"
+      },
+      "json": {
+        "name": "syslog 头之后的 JSON",
+        "hint": "通过 syslog 记录 JSON 的容器或应用（Docker、Kubernetes）：从 JSON 中读取级别、时间、主机和消息。"
+      },
+      "windows-1252": {
+        "name": "重音乱码（Windows-1252）",
+        "hint": "不发送 UTF-8 的 Windows 或旧设备：其文本按 Windows-1252 解码。"
+      },
+      "bad-clock": {
+        "name": "时钟不可靠",
+        "hint": "时钟从未设置的设备：其消息使用到达时间。"
+      },
+      "own-format": {
+        "name": "自有格式",
+        "hint": "带命名分组（time、level、host、app、msg）的正则表达式，按设备的行进行调整。"
+      }
+    },
+    "tplStart": "从模板开始",
+    "tplChoose": "选择模板…",
+    "tplBuiltIn": "模板",
+    "myTemplates": "我的模板",
+    "myTemplatesHint": "以自定义名称保存的读取方式，在编写规则和导入文件时提供。它们保存在此窗口的设置中，无论窗口控制哪个引擎都可使用，并随导出文件一起传递。",
+    "myTemplatesEmpty": "暂无：在规则编辑器或文件导入的格式中，“另存为模板…”可保存读取方式。",
+    "saveTemplate": "另存为模板…",
+    "templateName": "模板名称",
+    "templateSaved": "模板已保存",
+    "templateDeleted": "模板已删除",
+    "fromTemplate": "使用我的模板",
+    "import": "导入…",
+    "export": "导出…",
+    "exported": "规则已导出到 {path}",
+    "imported": "已导入 {rules} 条规则（已停用）— 请检查其地址后再启用。已添加 {templates} 个模板。",
+    "hostNone": "不发送：使用来源地址",
+    "sumNoHost": "不发送主机名"
   },
   "storage": {
     "custom": "自定义…",
diff --git a/frontend/src/lib/sources.ts b/frontend/src/lib/sources.ts
index 05833a4..fb10969 100644
--- a/frontend/src/lib/sources.ts
+++ b/frontend/src/lib/sources.ts
@@ -31,6 +31,8 @@ export interface SourceRule {
     format: ImportFormat;
     hostname?: string;
     hostnameFromSource?: boolean;
+    /** It sends no hostname: the word after an RFC 3164 stamp is not one. */
+    noHostname?: boolean;
     appName?: string;
     arrivalTime?: boolean;
     levelFrom?: LevelFrom;
@@ -62,6 +64,55 @@ export const reorderSourceRules = (ids: string[]): Promise<void> => callGo('Reor
 export const trySourceRule = async (rule: SourceRule, samples: SourceSample[]): Promise<SourceTrial[]> =>
     (await callGo('TrySourceRule', rule, samples)) || [];
 
+/**
+ * A rule to start from: its way of reading, no device named. One that comes
+ * with SyslogStudio has no name — sources.templates.<id> says it — and one a
+ * person saved has the name they gave it.
+ */
+export interface SourceTemplate {
+    id: string;
+    name?: string;
+    rule: SourceRule;
+}
+
+/** What a file of exported rules brought: its templates are already saved. */
+export interface RuleFile {
+    rules?: SourceRule[];
+    templates?: SourceTemplate[];
+}
+
+export const getSourceTemplates = async (): Promise<SourceTemplate[]> => (await callGo('GetSourceTemplates')) || [];
+export const saveSourceTemplate = (t: SourceTemplate): Promise<SourceTemplate> => callGo('SaveSourceTemplate', t);
+export const deleteSourceTemplate = (id: string): Promise<void> => callGo('DeleteSourceTemplate', id);
+/** Asks where, and writes the rules there with this person's templates; '' when cancelled. */
+export const exportSourceRules = (rules: SourceRule[]): Promise<string> => callGo('ExportSourceRules', rules);
+/** Asks for a file of exported rules and reads it; empty when cancelled. */
+export const readSourceRulesFile = async (): Promise<RuleFile> => (await callGo('ReadSourceRulesFile')) || {};
+
+/** Bumped when a template is saved or deleted, for the lists to read them again. */
+export const templatesVersion = writable(0);
+
+/** A template's name, in the window's language for one that comes with SyslogStudio. */
+export function templateName(t: SourceTemplate, translate: (key: string) => string): string {
+    return t.name || translate(`sources.templates.${t.id}.name`);
+}
+
+/** Whether a person saved it. */
+export const isOwnTemplate = (t: SourceTemplate): boolean => !!t.name;
+
+/**
+ * A rule read the way a template reads: its format and corrections, keeping
+ * the rule's name, whether it is on, and the devices it names.
+ */
+export function withTemplate(rule: SourceRule, t: SourceTemplate): SourceRule {
+    return {
+        ...emptyRule(),
+        ...structuredClone(t.rule),
+        id: rule.id, name: rule.name, enabled: rule.enabled, match: rule.match,
+        format: { ...emptyRule().format, ...t.rule.format },
+    };
+}
+
 /** Which stored messages to read again with the rules. */
 export interface RereadOptions {
     /** Received at or after this instant (RFC 3339); '' is every one. */
diff --git a/frontend/wailsjs/go/main/App.d.ts b/frontend/wailsjs/go/main/App.d.ts
index 7be004d..79b2ed1 100644
--- a/frontend/wailsjs/go/main/App.d.ts
+++ b/frontend/wailsjs/go/main/App.d.ts
@@ -4,6 +4,7 @@ import {models} from '../models';
 import {search} from '../models';
 import {notify} from '../models';
 import {importer} from '../models';
+import {sources} from '../models';
 
 export function AddAlertRule(arg1:models.AlertRule):Promise<models.AlertRule>;
 
@@ -47,6 +48,8 @@ export function DeleteNotifySink(arg1:string):Promise<void>;
 
 export function DeleteSourceRule(arg1:string):Promise<void>;
 
+export function DeleteSourceTemplate(arg1:string):Promise<void>;
+
 export function DescribeBackup(arg1:string):Promise<models.BackupFile>;
 
 export function DisableEncryption(arg1:string):Promise<void>;
@@ -67,6 +70,8 @@ export function ExportSelection(arg1:Array<string>,arg2:string,arg3:string):Prom
 
 export function ExportServerCertificate():Promise<string>;
 
+export function ExportSourceRules(arg1:Array<models.SourceRule>):Promise<string>;
+
 export function GenerateCA(arg1:models.CertOptions):Promise<models.CertInfo>;
 
 export function GenerateCertificate(arg1:models.CertOptions):Promise<models.CertInfo>;
@@ -141,6 +146,8 @@ export function GetSimulatorStatus():Promise<models.SimulatorStatus>;
 
 export function GetSourceRules():Promise<Array<models.SourceRule>>;
 
+export function GetSourceTemplates():Promise<Array<models.SourceTemplate>>;
+
 export function GetStats():Promise<models.ServerStats>;
 
 export function GetStorageConfig():Promise<models.StorageConfig>;
@@ -193,6 +200,8 @@ export function QueryMessages(arg1:models.QueryOptions):Promise<models.PagedResu
 
 export function QuitApplication():Promise<void>;
 
+export function ReadSourceRulesFile():Promise<sources.RuleFile>;
+
 export function RemoveRecoveryKey():Promise<void>;
 
 export function ReorderSourceRules(arg1:Array<string>):Promise<void>;
@@ -221,6 +230,8 @@ export function SaveSimulatorConfig(arg1:models.SimulatorConfig):Promise<void>;
 
 export function SaveSourceRule(arg1:models.SourceRule):Promise<models.SourceRule>;
 
+export function SaveSourceTemplate(arg1:models.SourceTemplate):Promise<models.SourceTemplate>;
+
 export function SealServiceHistory(arg1:string):Promise<void>;
 
 export function SelectBackupDir():Promise<string>;
diff --git a/frontend/wailsjs/go/main/App.js b/frontend/wailsjs/go/main/App.js
index c3eb18c..2dd14bb 100644
--- a/frontend/wailsjs/go/main/App.js
+++ b/frontend/wailsjs/go/main/App.js
@@ -86,6 +86,10 @@ export function DeleteSourceRule(arg1) {
   return window['go']['main']['App']['DeleteSourceRule'](arg1);
 }
 
+export function DeleteSourceTemplate(arg1) {
+  return window['go']['main']['App']['DeleteSourceTemplate'](arg1);
+}
+
 export function DescribeBackup(arg1) {
   return window['go']['main']['App']['DescribeBackup'](arg1);
 }
@@ -126,6 +130,10 @@ export function ExportServerCertificate() {
   return window['go']['main']['App']['ExportServerCertificate']();
 }
 
+export function ExportSourceRules(arg1) {
+  return window['go']['main']['App']['ExportSourceRules'](arg1);
+}
+
 export function GenerateCA(arg1) {
   return window['go']['main']['App']['GenerateCA'](arg1);
 }
@@ -274,6 +282,10 @@ export function GetSourceRules() {
   return window['go']['main']['App']['GetSourceRules']();
 }
 
+export function GetSourceTemplates() {
+  return window['go']['main']['App']['GetSourceTemplates']();
+}
+
 export function GetStats() {
   return window['go']['main']['App']['GetStats']();
 }
@@ -378,6 +390,10 @@ export function QuitApplication() {
   return window['go']['main']['App']['QuitApplication']();
 }
 
+export function ReadSourceRulesFile() {
+  return window['go']['main']['App']['ReadSourceRulesFile']();
+}
+
 export function RemoveRecoveryKey() {
   return window['go']['main']['App']['RemoveRecoveryKey']();
 }
@@ -434,6 +450,10 @@ export function SaveSourceRule(arg1) {
   return window['go']['main']['App']['SaveSourceRule'](arg1);
 }
 
+export function SaveSourceTemplate(arg1) {
+  return window['go']['main']['App']['SaveSourceTemplate'](arg1);
+}
+
 export function SealServiceHistory(arg1) {
   return window['go']['main']['App']['SealServiceHistory'](arg1);
 }
diff --git a/frontend/wailsjs/go/models.ts b/frontend/wailsjs/go/models.ts
index 18a4e62..8503a88 100644
--- a/frontend/wailsjs/go/models.ts
+++ b/frontend/wailsjs/go/models.ts
@@ -1010,6 +1010,7 @@ export namespace models {
 	    format: ImportFormat;
 	    hostname?: string;
 	    hostnameFromSource?: boolean;
+	    noHostname?: boolean;
 	    appName?: string;
 	    arrivalTime?: boolean;
 	    levelFrom?: string;
@@ -1028,6 +1029,7 @@ export namespace models {
 	        this.format = this.convertValues(source["format"], ImportFormat);
 	        this.hostname = source["hostname"];
 	        this.hostnameFromSource = source["hostnameFromSource"];
+	        this.noHostname = source["noHostname"];
 	        this.appName = source["appName"];
 	        this.arrivalTime = source["arrivalTime"];
 	        this.levelFrom = source["levelFrom"];
@@ -1424,6 +1426,40 @@ export namespace models {
 	        this.protocol = source["protocol"];
 	    }
 	}
+	export class SourceTemplate {
+	    id: string;
+	    name?: string;
+	    rule: SourceRule;
+	
+	    static createFrom(source: any = {}) {
+	        return new SourceTemplate(source);
+	    }
+	
+	    constructor(source: any = {}) {
+	        if ('string' === typeof source) source = JSON.parse(source);
+	        this.id = source["id"];
+	        this.name = source["name"];
+	        this.rule = this.convertValues(source["rule"], SourceRule);
+	    }
+	
+		convertValues(a: any, classs: any, asMap: boolean = false): any {
+		    if (!a) {
+		        return a;
+		    }
+		    if (a.slice && a.map) {
+		        return (a as any[]).map(elem => this.convertValues(elem, classs));
+		    } else if ("object" === typeof a) {
+		        if (asMap) {
+		            for (const key of Object.keys(a)) {
+		                a[key] = new classs(a[key]);
+		            }
+		            return a;
+		        }
+		        return new classs(a);
+		    }
+		    return a;
+		}
+	}
 	export class SourceTrial {
 	    matched: boolean;
 	    before: SyslogMessage;
@@ -2145,3 +2181,44 @@ export namespace search {
 
 }
 
+export namespace sources {
+	
+	export class RuleFile {
+	    format: string;
+	    version: number;
+	    rules: models.SourceRule[];
+	    templates?: models.SourceTemplate[];
+	
+	    static createFrom(source: any = {}) {
+	        return new RuleFile(source);
+	    }
+	
+	    constructor(source: any = {}) {
+	        if ('string' === typeof source) source = JSON.parse(source);
+	        this.format = source["format"];
+	        this.version = source["version"];
+	        this.rules = this.convertValues(source["rules"], models.SourceRule);
+	        this.templates = this.convertValues(source["templates"], models.SourceTemplate);
+	    }
+	
+		convertValues(a: any, classs: any, asMap: boolean = false): any {
+		    if (!a) {
+		        return a;
+		    }
+		    if (a.slice && a.map) {
+		        return (a as any[]).map(elem => this.convertValues(elem, classs));
+		    } else if ("object" === typeof a) {
+		        if (asMap) {
+		            for (const key of Object.keys(a)) {
+		                a[key] = new classs(a[key]);
+		            }
+		            return a;
+		        }
+		        return new classs(a);
+		    }
+		    return a;
+		}
+	}
+
+}
+
diff --git a/internal/models/models.go b/internal/models/models.go
index 25d1e45..f64d467 100644
--- a/internal/models/models.go
+++ b/internal/models/models.go
@@ -313,6 +313,9 @@ type AppConfig struct {
 	// SourceRules say how the messages of devices that bend the syslog RFCs
 	// are read, in the order they are tried.
 	SourceRules []SourceRule `json:"sourceRules,omitempty"`
+	// SourceTemplates are the templates a person saved: the window's own,
+	// whichever engine it drives.
+	SourceTemplates []SourceTemplate `json:"sourceTemplates,omitempty"`
 	// Backup is where copies of the database go, and when.
 	Backup BackupConfig `json:"backup"`
 }
diff --git a/internal/models/sources.go b/internal/models/sources.go
index 0d6cf88..64346e1 100644
--- a/internal/models/sources.go
+++ b/internal/models/sources.go
@@ -26,10 +26,15 @@ type SourceRule struct {
 	// apply, in the device's time zone when one is given.
 	Format ImportFormat `json:"format"`
 
-	// Hostname replaces the one sent, for a device that sends none or the
-	// wrong one; HostnameFromSource uses the address it arrived from.
+	// Hostname replaces the one sent, for a device that sends the wrong one;
+	// HostnameFromSource uses the address it arrived from instead.
 	Hostname           string `json:"hostname,omitempty"`
 	HostnameFromSource bool   `json:"hostnameFromSource,omitempty"`
+	// NoHostname is a device that sends no hostname at all. In an RFC 3164
+	// message the word after the timestamp is then not one but the start of
+	// the tag or the text, and goes back there; the hostname is the address
+	// it arrived from, unless the format read one.
+	NoHostname bool `json:"noHostname,omitempty"`
 	// AppName replaces the application.
 	AppName string `json:"appName,omitempty"`
 	// ArrivalTime uses the moment the message arrived, for a device whose
@@ -99,6 +104,22 @@ type SourceTrial struct {
 	After   SyslogMessage `json:"after"`
 }
 
+// SourceTemplate is a rule ready to start from, for a kind of device: its
+// format and corrections, with no device named yet. A template that comes
+// with SyslogStudio has no Name: the window says it in its language, by ID.
+// One a person saved has the name they gave it.
+type SourceTemplate struct {
+	ID   string     `json:"id"`
+	Name string     `json:"name,omitempty"`
+	Rule SourceRule `json:"rule"`
+}
+
+// AsTemplate is a rule's way of reading, without the devices it names.
+func (r SourceRule) AsTemplate() SourceRule {
+	r.ID, r.Name, r.Enabled, r.Match = "", "", false, SourceMatch{}
+	return r
+}
+
 // RereadOptions says which stored messages to read again with the source
 // rules. Only messages received from a device are: an imported line was read
 // by its file's format.
diff --git a/internal/sources/file.go b/internal/sources/file.go
new file mode 100644
index 0000000..214c41e
--- /dev/null
+++ b/internal/sources/file.go
@@ -0,0 +1,106 @@
+package sources
+
+import (
+	"encoding/json"
+	"errors"
+	"fmt"
+	"strings"
+
+	"SyslogStudio/internal/models"
+)
+
+// A file of source rules: what one installation exports for another to
+// import, with the templates the person saved. Both travel without their ids
+// — the one importing gives them its own — and are checked as they would be
+// when saved.
+
+const (
+	fileFormat  = "syslogstudio-source-rules"
+	fileVersion = 1
+	// maxFileRules bounds what one file brings.
+	maxFileRules = 500
+	// MaxFileSize bounds what is read of one.
+	MaxFileSize = 4 << 20
+)
+
+// RuleFile is what a file of source rules holds.
+type RuleFile struct {
+	Format    string                  `json:"format"`
+	Version   int                     `json:"version"`
+	Rules     []models.SourceRule     `json:"rules"`
+	Templates []models.SourceTemplate `json:"templates,omitempty"`
+}
+
+// EncodeFile writes rules and templates as a file to share.
+func EncodeFile(rules []models.SourceRule, templates []models.SourceTemplate) ([]byte, error) {
+	f := RuleFile{Format: fileFormat, Version: fileVersion, Rules: []models.SourceRule{}}
+	for _, r := range rules {
+		r.ID = ""
+		f.Rules = append(f.Rules, r)
+	}
+	for _, t := range templates {
+		t.ID = ""
+		f.Templates = append(f.Templates, t)
+	}
+	data, err := json.MarshalIndent(f, "", "  ")
+	if err != nil {
+		return nil, err
+	}
+	return append(data, '\n'), nil
+}
+
+// DecodeFile reads a file of rules, refusing it whole when one of them would
+// not be saved: half a set of rules that work together reads devices in ways
+// nobody chose.
+func DecodeFile(data []byte) (RuleFile, error) {
+	if len(data) > MaxFileSize {
+		return RuleFile{}, errors.New("this file is too large to be a file of source rules")
+	}
+	var f RuleFile
+	if err := json.Unmarshal(data, &f); err != nil || f.Format != fileFormat {
+		return RuleFile{}, errors.New("this is not a file of source rules exported by SyslogStudio")
+	}
+	if f.Version > fileVersion {
+		return RuleFile{}, errors.New("these rules were exported by a newer SyslogStudio: update it to import them")
+	}
+	if len(f.Rules)+len(f.Templates) == 0 {
+		return RuleFile{}, errors.New("this file holds no rule and no template")
+	}
+	if n := len(f.Rules) + len(f.Templates); n > maxFileRules {
+		return RuleFile{}, fmt.Errorf("this file holds %d rules and templates, more than the %d one file may bring", n, maxFileRules)
+	}
+	for i := range f.Rules {
+		f.Rules[i].ID = ""
+		if err := Compile(f.Rules[i]); err != nil {
+			return RuleFile{}, fmt.Errorf("rule %q: %w", nameOr(f.Rules[i].Name, i), err)
+		}
+	}
+	for i := range f.Templates {
+		f.Templates[i].ID = ""
+		if err := CheckTemplate(f.Templates[i]); err != nil {
+			return RuleFile{}, fmt.Errorf("template %q: %w", nameOr(f.Templates[i].Name, i), err)
+		}
+	}
+	return f, nil
+}
+
+func nameOr(name string, i int) string {
+	if name == "" {
+		return fmt.Sprintf("#%d", i+1)
+	}
+	return name
+}
+
+// CheckTemplate says what is wrong with a template a person saved: a name,
+// and a way of reading that would compile once a device is named.
+func CheckTemplate(t models.SourceTemplate) error {
+	if strings.TrimSpace(t.Name) == "" {
+		return errors.New("give the template a name")
+	}
+	if len(t.Name) > 200 {
+		return errors.New("the template's name is longer than 200 characters")
+	}
+	r := t.Rule.AsTemplate()
+	r.Match = models.SourceMatch{Sources: []string{"0.0.0.0/0"}}
+	return Compile(r)
+}
diff --git a/internal/sources/sources.go b/internal/sources/sources.go
index d59dfd9..4b03e78 100644
--- a/internal/sources/sources.go
+++ b/internal/sources/sources.go
@@ -158,6 +158,11 @@ func (r *Reader) apply(c *rule, raw []byte, msg models.SyslogMessage, rd syslog.
 		}
 	}
 
+	// A device that sends no hostname: what was taken for one was not.
+	if c.NoHostname {
+		syslog.RereadWithoutHost(&msg, rd)
+	}
+
 	// An RFC 3164 stamp carries no zone, and was read in this machine's: the
 	// device's wall clock is in the rule's. A time the format reads below is
 	// read in it too.
@@ -182,7 +187,7 @@ func (r *Reader) apply(c *rule, raw []byte, msg models.SyslogMessage, rd syslog.
 	}
 
 	switch {
-	case c.HostnameFromSource:
+	case c.HostnameFromSource, c.NoHostname && strings.TrimSpace(msg.Hostname) == "":
 		msg.Hostname = msg.SourceIP
 	case strings.TrimSpace(c.Hostname) != "":
 		msg.Hostname = strings.TrimSpace(c.Hostname)
diff --git a/internal/sources/templates.go b/internal/sources/templates.go
new file mode 100644
index 0000000..89685d7
--- /dev/null
+++ b/internal/sources/templates.go
@@ -0,0 +1,27 @@
+package sources
+
+import "SyslogStudio/internal/models"
+
+// Templates are the rules offered to start from, each for a kind of device
+// and doing only what its name says: the reading as received already copes
+// with much (RFC 3164 and 5424, rsyslog's forward, key=value such as
+// FortiGate's, JSON after the priority, Cisco), and a template is for what it
+// cannot know — that this device sends no hostname, keeps its level in the
+// text, logs JSON behind a standard header, garbles accents, or has a clock
+// nobody set. templates_test.go reads a message of each kind with it, and
+// none is offered that would read it as the reading as received does.
+func Templates() []models.SourceTemplate {
+	auto := models.ImportFormat{Mode: models.ImportAuto}
+	return []models.SourceTemplate{
+		{ID: "no-hostname", Rule: models.SourceRule{Format: auto, NoHostname: true}},
+		{ID: "camera", Rule: models.SourceRule{Format: auto, NoHostname: true, LevelFrom: models.LevelFromMessage}},
+		{ID: "level-in-text", Rule: models.SourceRule{Format: auto, LevelFrom: models.LevelFromMessage}},
+		{ID: "json", Rule: models.SourceRule{Format: models.ImportFormat{Mode: models.ImportJSON}}},
+		{ID: "windows-1252", Rule: models.SourceRule{Format: auto, Encoding: models.EncodingWindows1252}},
+		{ID: "bad-clock", Rule: models.SourceRule{Format: auto, ArrivalTime: true}},
+		{ID: "own-format", Rule: models.SourceRule{Format: models.ImportFormat{
+			Mode:    models.ImportCustom,
+			Pattern: `^(?P<time>\S+ \S+) (?P<level>\w+) (?P<msg>.*)$`,
+		}}},
+	}
+}
diff --git a/internal/sources/templates_test.go b/internal/sources/templates_test.go
new file mode 100644
index 0000000..3533f4b
--- /dev/null
+++ b/internal/sources/templates_test.go
@@ -0,0 +1,166 @@
+package sources
+
+import (
+	"encoding/json"
+	"os"
+	"path/filepath"
+	"strings"
+	"testing"
+	"time"
+
+	"golang.org/x/text/encoding/charmap"
+
+	"SyslogStudio/internal/models"
+)
+
+// Every template does what its name says, on a message from the kind of
+// device it is for — and what the reading as received does not.
+func TestTemplates_DoWhatTheySay(t *testing.T) {
+	latin, _ := charmap.Windows1252.NewEncoder().Bytes([]byte("<13>Oct 27 09:14:02 printsrv spooler: Impression terminée"))
+	cases := map[string][]struct {
+		raw   []byte
+		check func(m models.SyslogMessage) bool
+	}{
+		"no-hostname": {
+			{[]byte("<14>Oct 27 09:14:02 motion detected on channel 2"), func(m models.SyslogMessage) bool {
+				return m.Hostname == "10.0.0.2" && m.Message == "motion detected on channel 2"
+			}},
+			{[]byte("<187>123: *Oct 27 09:14:02.123: %LINK-3-UPDOWN: Interface Gi0/1, changed state to down"), func(m models.SyslogMessage) bool {
+				return m.Hostname == "10.0.0.2" && m.AppName == "%LINK-3-UPDOWN"
+			}},
+			{[]byte("<14>Oct 27 09:14:02 dhcp: lease 10.0.0.50 assigned"), func(m models.SyslogMessage) bool {
+				return m.Hostname == "10.0.0.2" && m.AppName == "dhcp"
+			}},
+		},
+		"camera": {
+			{[]byte("<14>Oct 27 09:14:05 recorder: WARNING low light"), func(m models.SyslogMessage) bool {
+				return m.Hostname == "10.0.0.2" && m.AppName == "recorder" && m.Severity == models.SevWarning
+			}},
+			{[]byte("2026-10-27 09:14:02 ERROR motion detection failed on channel 2"), func(m models.SyslogMessage) bool {
+				return m.Hostname == "10.0.0.2" && m.Severity == models.SevError
+			}},
+		},
+		"level-in-text": {
+			{[]byte("<14>Oct 27 09:14:05 cam-lobby recorder: disk ERROR on volume 2"), func(m models.SyslogMessage) bool {
+				return m.Hostname == "cam-lobby" && m.Severity == models.SevError
+			}},
+		},
+		"json": {
+			{[]byte(`<14>Oct 27 09:14:02 docker-host web[311]: {"level":"error","msg":"payment API returned 502","host":"web-7"}`),
+				func(m models.SyslogMessage) bool {
+					return m.Hostname == "web-7" && m.AppName == "web" && m.Severity == models.SevError && m.Message == "payment API returned 502"
+				}},
+		},
+		"windows-1252": {
+			{latin, func(m models.SyslogMessage) bool { return m.Message == "Impression terminée" }},
+		},
+		"bad-clock": {
+			{[]byte("<14>Jan  1 00:00:00 plc-7 controller: cycle done"), func(m models.SyslogMessage) bool {
+				return m.Timestamp.Equal(m.ReceivedAt)
+			}},
+		},
+		"own-format": {
+			{[]byte("<14>2026-10-27 09:14:02 ERROR something broke"), func(m models.SyslogMessage) bool {
+				return m.Severity == models.SevError && m.Message == "something broke" &&
+					m.Timestamp.Equal(time.Date(2026, 10, 27, 9, 14, 2, 0, time.Local))
+			}},
+		},
+	}
+	seen := map[string]bool{}
+	for _, tpl := range Templates() {
+		if tpl.ID == "" || tpl.Name != "" || seen[tpl.ID] {
+			t.Errorf("template %+v: an ID of its own and no name", tpl)
+		}
+		seen[tpl.ID] = true
+		rule := tpl.Rule
+		rule.Name, rule.Enabled = tpl.ID, true
+		rule.Match = models.SourceMatch{Sources: []string{"10.0.0.2"}}
+		r := reader(t, rule)
+		if len(cases[tpl.ID]) == 0 {
+			t.Errorf("template %s is tried on no message", tpl.ID)
+		}
+		for _, c := range cases[tpl.ID] {
+			if m := r.Read(c.raw, "10.0.0.2", "UDP"); !c.check(m) {
+				t.Errorf("%s on %q: host %q app %q %s %q at %v", tpl.ID, c.raw, m.Hostname, m.AppName, m.SeverityLabel, m.Message, m.Timestamp)
+			}
+			// A template the reading as received already equals is no use.
+			if c.check(New().Read(c.raw, "10.0.0.2", "UDP")) {
+				t.Errorf("%s on %q: read so without it", tpl.ID, c.raw)
+			}
+		}
+	}
+	for id := range cases {
+		if !seen[id] {
+			t.Errorf("a case for %s, which is no template", id)
+		}
+	}
+}
+
+// The window names each template, in every language it speaks.
+func TestTemplates_NamedInEveryLanguage(t *testing.T) {
+	dir := filepath.Join("..", "..", "frontend", "src", "lib", "i18n")
+	files, err := filepath.Glob(filepath.Join(dir, "*.json"))
+	if err != nil || len(files) < 8 {
+		t.Fatalf("locales: %v, %v", files, err)
+	}
+	for _, f := range files {
+		data, err := os.ReadFile(f)
+		if err != nil {
+			t.Fatal(err)
+		}
+		var locale struct {
+			Sources struct {
+				Templates map[string]struct{ Name, Hint string } `json:"templates"`
+			} `json:"sources"`
+		}
+		if err := json.Unmarshal(data, &locale); err != nil {
+			t.Fatalf("%s: %v", f, err)
+		}
+		for _, tpl := range Templates() {
+			if n := locale.Sources.Templates[tpl.ID]; strings.TrimSpace(n.Name) == "" || strings.TrimSpace(n.Hint) == "" {
+				t.Errorf("%s: sources.templates.%s has no name or hint", filepath.Base(f), tpl.ID)
+			}
+		}
+	}
+}
+
+// A file of rules goes from one installation to another whole, or not at all.
+func TestFile(t *testing.T) {
+	rules := []models.SourceRule{
+		{ID: "source-1", Name: "camera", Enabled: true, Match: bySource("10.0.7.0/24"), NoHostname: true},
+		{ID: "source-2", Name: "firewall", Enabled: false, Match: bySource("10.0.0.1"), Format: models.ImportFormat{Mode: models.ImportLogfmt}},
+	}
+	templates := []models.SourceTemplate{{ID: "mine-1", Name: "Lobby cameras", Rule: models.SourceRule{NoHostname: true}}}
+	data, err := EncodeFile(rules, templates)
+	if err != nil {
+		t.Fatal(err)
+	}
+	f, err := DecodeFile(data)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(f.Rules) != 2 || f.Rules[0].ID != "" || f.Rules[0].Name != "camera" || !f.Rules[0].NoHostname || f.Rules[1].Enabled {
+		t.Errorf("rules read back: %+v", f.Rules)
+	}
+	if len(f.Templates) != 1 || f.Templates[0].ID != "" || f.Templates[0].Name != "Lobby cameras" {
+		t.Errorf("templates read back: %+v", f.Templates)
+	}
+
+	broken, _ := EncodeFile([]models.SourceRule{rules[0], {Name: "half", Match: bySource("10.0")}}, nil)
+	newer := strings.Replace(string(data), `"version": 1`, `"version": 2`, 1)
+	unnamed, _ := EncodeFile(nil, []models.SourceTemplate{{Rule: models.SourceRule{NoHostname: true}}})
+	for name, bad := range map[string][]byte{
+		"not json":           []byte("{"),
+		"another file":       []byte(`{"format":"something-else","version":1,"rules":[]}`),
+		"a newer version":    []byte(newer),
+		"nothing in it":      []byte(`{"format":"syslogstudio-source-rules","version":1,"rules":[]}`),
+		"one rule broken":    broken,
+		"a template unnamed": unnamed,
+	} {
+		if _, err := DecodeFile(bad); err == nil {
+			t.Errorf("%s: accepted", name)
+		} else if name == "one rule broken" && !strings.Contains(err.Error(), `"half"`) {
+			t.Errorf("the broken rule is not named: %v", err)
+		}
+	}
+}
diff --git a/internal/storage/config.go b/internal/storage/config.go
index 558de77..498328e 100644
--- a/internal/storage/config.go
+++ b/internal/storage/config.go
@@ -433,6 +433,22 @@ func (cs *ConfigStore) SaveSourceRules(rules []models.SourceRule) {
 	cs.saveAll(all)
 }
 
+// LoadSourceTemplates reads the templates a person saved.
+func (cs *ConfigStore) LoadSourceTemplates() []models.SourceTemplate {
+	cs.mu.Lock()
+	defer cs.mu.Unlock()
+	return cs.loadAll().SourceTemplates
+}
+
+// SaveSourceTemplates writes them.
+func (cs *ConfigStore) SaveSourceTemplates(templates []models.SourceTemplate) {
+	cs.mu.Lock()
+	defer cs.mu.Unlock()
+	all := cs.loadAll()
+	all.SourceTemplates = templates
+	cs.saveAll(all)
+}
+
 // LoadInbox reads the sealed inbox configuration: nil when what is received
 // is stored in the clear.
 func (cs *ConfigStore) LoadInbox() *models.InboxConfig {
diff --git a/internal/syslog/parser.go b/internal/syslog/parser.go
index c271bee..d153c59 100644
--- a/internal/syslog/parser.go
+++ b/internal/syslog/parser.go
@@ -328,6 +328,25 @@ func absDuration(d time.Duration) time.Duration {
 // space. What is not is kept as text here, and read again by whoever knows
 // more shapes than this parser does.
 func parseRFC3164(remainder string, msg *models.SyslogMessage) bool {
+	return readBSD(remainder, msg, true)
+}
+
+// RereadWithoutHost reads an RFC 3164 message again for a device that sends
+// no hostname: the word after the timestamp, taken for one, is the start of
+// the tag or the text. Any other message is left as it is.
+func RereadWithoutHost(msg *models.SyslogMessage, rd Reading) {
+	if !rd.Standard || msg.Version != 0 || msg.Hostname == "" {
+		return
+	}
+	m := *msg
+	m.Hostname, m.AppName, m.ProcID, m.Message = "", "", "", ""
+	readBSD(rd.Body, &m, false)
+	m.Timestamp = msg.Timestamp
+	*msg = m
+}
+
+// readBSD is parseRFC3164, the host read or not.
+func readBSD(remainder string, msg *models.SyslogMessage, withHost bool) bool {
 	msg.Version = 0
 
 	if len(remainder) == 0 {
@@ -378,7 +397,7 @@ func parseRFC3164(remainder string, msg *models.SyslogMessage) bool {
 	// Next token is hostname (until space)
 	spaceIdx := strings.Index(remainder, " ")
 	if spaceIdx < 0 {
-		if isTagToken(remainder) {
+		if !withHost || isTagToken(remainder) {
 			msg.Message = clone(remainder)
 			extractAppFromMsg(msg)
 			return standard
@@ -390,7 +409,7 @@ func parseRFC3164(remainder string, msg *models.SyslogMessage) bool {
 	// Many devices leave the host out — "Oct 27 09:14:02 dhcp: lease …" —
 	// and what stands in its place is then the tag. A hostname never ends in a
 	// colon.
-	if isTagToken(remainder[:spaceIdx]) {
+	if !withHost || isTagToken(remainder[:spaceIdx]) {
 		msg.Message = clone(remainder)
 		extractAppFromMsg(msg)
 		return standard
diff --git a/internal/syslog/parser_test.go b/internal/syslog/parser_test.go
index 945729d..f975457 100644
--- a/internal/syslog/parser_test.go
+++ b/internal/syslog/parser_test.go
@@ -887,3 +887,33 @@ func TestRead_SaysWhatIsStandard(t *testing.T) {
 		}
 	}
 }
+
+// A device that sends no hostname: the word after the timestamp goes back to
+// the tag or the text, and nothing else of the message changes.
+func TestRereadWithoutHost(t *testing.T) {
+	for raw, want := range map[string][3]string{
+		"<14>Oct 27 09:14:02 motion detected on channel 2": {"", "", "motion detected on channel 2"},
+		"<14>Oct 27 09:14:02 cam-7 recorder: low light":    {"", "", "cam-7 recorder: low light"},
+		"<14>Oct 27 09:14:02 recorder[12]: low light":      {"", "recorder", "low light"},
+	} {
+		msg, rd := Read([]byte(raw), "10.0.0.2", "UDP")
+		ts := msg.Timestamp
+		RereadWithoutHost(&msg, rd)
+		if msg.Hostname != want[0] || msg.AppName != want[1] || msg.Message != want[2] || !msg.Timestamp.Equal(ts) {
+			t.Errorf("%q: host %q app %q message %q at %v", raw, msg.Hostname, msg.AppName, msg.Message, msg.Timestamp)
+		}
+	}
+	// RFC 5424 says where its hostname is; a header that is not the RFCs' was
+	// read by someone else.
+	for _, raw := range []string{
+		"<14>1 2026-10-27T09:14:02Z web-01 nginx - - - hello",
+		"<187>123: *Oct 27 09:14:02.123: %LINK-3-UPDOWN: Interface Gi0/1, changed state to down",
+	} {
+		msg, rd := Read([]byte(raw), "10.0.0.2", "UDP")
+		before := msg
+		RereadWithoutHost(&msg, rd)
+		if msg != before {
+			t.Errorf("%q changed: %+v", raw, msg)
+		}
+	}
+}