You can't edit the rudder.conf, as it is copied from a template; otherwise you'll have perpetual repair from both promises, and perpetual restart of rsyslog