Multiple plugins can be added in classification rules file in each group section :
<group id="unknown"> <description>Unknown log events : to be categorized</description> <report publisher="file"/> <plugin type="freq"> <param name="attribute">severity</param> </plugin> <plugin type="other"> <param name="param">value</param> </plugin> </group>