set $.foo = $!_FOO;
*.* /dev/null # we need to have one action, else rsyslog aborts for that reason