...
syslog-tag is a single-valued field used by syslog to indicate the name and the PID of the application generating the event (for example, httpd[215]: )
mags tags is a multi-valued array field that can contain zero or more tags. Â Tags can contain multiple tokens separated by space.
...