A rulebase for liblognorm and usage in rsyslog via mmnormalize.