logstash output always severity code 5 and facility code 1

[PeterGarlic]

logstash 6.3.x seems to have problems with rsyslog processing: severity/facility are not decoded as expected with centos75, Debian94 and Ubuntu1604. We opened a discussion on discuss.elastic.co

- Here the first part of the discussion with rsyslog configuration, the logstash chain and the output:

https://discuss.elastic.co/t/centos-7-5-with-rsyslog-8-24-logstash-6-3-0-on-logstash-output-always-severity-code-5-and-facility-code-1-other-post-found-on-but-still-not-solved/137206

- Here the second part of the discussion:

https://discuss.elastic.co/t/centos-7-rsyslog-logstash-6-3-0-on-logstash-output-always-severity-code-5-and-facility-code-1-2/140265

- Here a previous post related to RFC5424 log support:

logstash-plugins/logstash-input-syslog#15 (comment)