Understanding rsyslog logging rules