refactor rsyslog input for router role
diff --git a/metadata/service/server/amqp/router.yml b/metadata/service/server/amqp/router.yml
index 8b26c84..d0e3153 100644
--- a/metadata/service/server/amqp/router.yml
+++ b/metadata/service/server/amqp/router.yml
@@ -21,7 +21,7 @@
         rsyslog_syslog:
           engine: logstreamer
           log_directory: /var/log
-          file_match: "?P<Service>daemon\.log|cron\.log|mail\.log|kern\.log|auth\.log|syslog|messages|debug)\.?(?P<Index>\d+)?(.gz)?"
+          file_match: "(?P<Service>daemon\.log|cron\.log|mail\.log|kern\.log|auth\.log|syslog|messages|debug)\.?(?P<Index>\d+)?(.gz)?"
           priority: ["^Index"]
           differentiator: [ "rsyslog-", "Service" ]
           decoder: RsyslogDecoder