This looks to be the correct format.
Tags and host mask are separated by a space.
Hostmask and Command is separated by a space.
Command may have additional parameters and is separated from the message with the message starting with a ‘:’
Message is terminated with a new line.