$IncludeConfig diag-common.conf template(name="outfmt" type="string" string="%$!usr!msg:F,58:2%\n") set $!usr!msg = $msg; if $msg contains 'msgnum' then action(type="omfile" file="./rsyslog.out.log" template="outfmt")