1. write questions to list pls, I'm not a service support
2. why do you have a line break in $template, all text betwen $template and \n" this is one line (use copy-paste)
3. about '& stop' vs '& ~', tilde - legacy but still working variant, and therefore suitable for the old and new rsyslog versions
and in irc you sayd that syslog messages displayed if in cisco device set logging without timezone, this is not true?