refactor rsyslog input
diff --git a/metadata/service/server/amqp/shipper.yml b/metadata/service/server/amqp/shipper.yml
index c263b71..1d5767a 100644
--- a/metadata/service/server/amqp/shipper.yml
+++ b/metadata/service/server/amqp/shipper.yml
@@ -9,7 +9,7 @@
rsyslog_syslog:
engine: logstreamer
log_directory: /var/log
- file_match: ?P<Service>daemon\.log|cron\.log|mail\.log|kern\.log|auth\.log|syslog|messages|debug)\.?(?P<Index>\d+)?(.gz)?
+ file_match: '(?P<Service>daemon\\.log|cron\\.log|mail\\.log|kern\\.log|auth\\.log|syslog|messages|debug)\\.?(?P<Index>\\d+)?(.gz)?'
priority: ["^Index"]
differentiator: [ "rsyslog-", "Service" ]
decoder: RsyslogDecoder