$IncludeConfig diag-common.conf template(name="outfmt" type="list") { property(name="msg" field.delimiter="58" field.number="2") constant(value="\n") } # we deliberately include continue/stop to make sure we have more than # one statement. This catches grammar erorrs ruleset(name="rs2") { continue action(type="omfile" file="./rsyslog.out.log" template="outfmt") stop } # this time we make sure a single statement is properly supported ruleset(name="rs1") { call rs2 } if $msg contains 'msgnum' then call rs1