Rsyslog is filtering --all-- nginx messages due to quoting(?)  Double quoted string produces correct effect.  Single quoted string will filter anything with '-' in it and presumeably other characters.
Merge pull request #4 from knappador/master

Rsyslog filter was broken