You could use Wireshark or tcpdump to check what rsyslog is sending to Graylog.
Is this line part of multiple configuration files in /etc/rsyslog.d?
This might cause sending messages multiple times. Make sure to read RSyslog Documentation - rsyslog as well.