Test cases for rsyslog rules