[DEFAULT] chain = PRE-VRMR-INPUT [ssh] logpath = /data/log/rsyslog/all.log