Here are a couple more improvements, from suggestions by the Debian maintainer:
1) Add comment in rsyslog.conf noting that the rules are in /etc/rsyslog.d
2) Don't parse /var/lib/dpkg/status directly, use dpkg-query
3) Rename default.conf to 50-default.conf
Here are a couple more improvements, from suggestions by the Debian maintainer: dpkg/status directly, use dpkg-query
1) Add comment in rsyslog.conf noting that the rules are in /etc/rsyslog.d
2) Don't parse /var/lib/
3) Rename default.conf to 50-default.conf