gistfile1.txt

$ cat /etc/rsyslog.d/fuzion.conf
$template DRUPAL,"<%PRI%> %TIMESTAMP:::date-rfc3339% %HOSTNAME% %syslogtag% -- %msg%\n"
:syslogtag, contains, "drupal" /var/log/drupal.log;DRUPAL
& ~

#$template DRUPAL,"<%PRI%> %TIMESTAMP:::date-rfc3339% %HOSTNAME% %syslogtag% -- %msg%\n"
#:syslogtag, contains, "drupal" /var/log/drupal/drupal.log;DRUPAL

$template DRUSH,"<%PRI%> %TIMESTAMP:::date-rfc3339% %HOSTNAME% %syslogtag% -- %msg%\n"
:syslogtag, contains, "drush" /var/log/drush.log;DRUSH
& ~

$template CIVICRM,"<%PRI%> %TIMESTAMP:::date-rfc3339% %HOSTNAME% %syslogtag% -- %msg%\n"
:syslogtag, contains, "civicrm" /var/log/civicrm.log;CIVICRM