1 2 3 4 5 6 7 8 9
$IncludeConfig diag-common.conf global(workDirectory="/tmp") template(name="outfmt" type="string" string="%$!usr!msg:F,58:2%\n") set $!usr!msg = $msg; if $msg contains 'msgnum' then action(type="omfile" file="./rsyslog.out.log" template="outfmt" queue.type="disk" queue.filename="rsyslog-act1")