version=2
rule=: %date:date-iso% %time:word% %tz:word% [%pid:char-to:\x5d%] %user:char-to:\x40%@%db:word% [%host:char-to:\x5d%] %severity:char-to:\x3a%: %msg:rest%