$IncludeConfig diag-common.conf

template(name="outfmt" type="list") {
	property(name="$!usr!msgnum")
	constant(value="\n")
}

if not ($msg contains 'msgnum') then
	stop

set $!usr!msgnum = field($msg, 58, 2);
if cnum($!usr!msgnum) >= 5000 then
	stop
/* We could use yet another method, but we like to have the action statement
 * without a filter in rsyslog.conf top level hierarchy - so this test, as
 * a side-effect, also tests this ability.
 */
action(type="omfile" file="./rsyslog.out.log" template="outfmt")