sample.xml
<event-def name="kern_event" version="2" severity="VAR">
                <description>
                        This event is generated when a kernel syslog message is
                        detected.
                </description>
                <param name="pri" type="INT">
                        <description>
                                The syslog priority of the message
                        </description>
                </param>
                <param name="msg" type="STRING">
                        <description>
                                The text of the message
                        </description>
                </param>
                <corrective-action type="NONE"/>
                <since>6.0</since>
                <deprecated>
                        Deprecated as of version 6.1.2 to address the formatting
                        problem of forwarded syslog messages.
                </deprecated>
</event-def>