logs: rules as received from RC use some specific consts.

[remeh]

APR-94

What does this PR do?

• Moves interpreting rules received through RC in a separate function for clarity
• Uses specific consts strings when interpreting rules received through RC, as these consts don't fully matches strings used in the library itself (which was a naive assumption).

Describe how to test/QA your changes

Not necessary, it will be tested during the #23915 QA (that's actually going through this that I've detected it).

[remeh]

/merge

[dd-devflow]

🚂 MergeQueue

This merge request is not mergeable yet, because of pending checks/missing approvals. It will be added to the queue as soon as checks pass and/or get approvals.
Note: if you pushed new commits since the last approval, you may need additional approval.
You can remove it from the waiting list with /remove command.

Use /merge -c to cancel this operation!

[pr-commenter]

Test changes on VM

Use this command from test-infra-definitions to manually test this PR changes on a VM:

inv create-vm --pipeline-id=31635424 --os-family=ubuntu

[dd-devflow]

🚂 MergeQueue

Pull request added to the queue.

This build is going to start soon! (estimated merge in less than 23m)

Use /merge -c to cancel this operation!