Rsyslog filter was broken

The single-quoted :msg, contains string somehow ended up filtering anything that had "-" in it, meaning virtually all web messages.  Test strings would be passed on as long as they contained no "-".  Nagios checks also would pass through, confusingly.  Behavior was confirmed in testing.  Extremely obscure.  In hindsight, filtering with grep in logstash is probably best.