-- rsyslog.conf

$ModLoad imuxsock # provides support for local system logging
$ModLoad imklog   # provides kernel logging support (previously done by rklogd)i
$ModLoad omprog

$actionomprogbinary /bin/bash /opt/logtest.sh
*.* :omprog:;RSYSLOG_TraditionalFileFormat
#$ModLoad immark  # provides --MARK-- message capability

# provides UDP syslog reception


--- logtest.sh

#/bin/bash
read var1
echo $var1 >> /var/log/test.out