syslog parsing in rsyslog - rsyslog 8 daily stable documentation
www.rsyslog.com