This rule does not work. File should be file_line, or you get duplicate resource declaration. https://github.com/fervidus/secure_linux_cis/blob/c875302edde6553871735fce3a958032ec163216/manifests/rules/ensure_rsyslog_is_not_configured_to_recieve_logs_from_a_remote_client.pp#L5