Rsyslog is filtering --all-- nginx messages due to quoting(?)  Double quoted string produces correct effect.  Single quoted string will filter anything with '-' in it and presumeably other characters.