It doesn't like that extra comma there, so you'll have to do something like:

var %temp \s{15,}
if ($regex($rawmsg,%temp)) { haltdef }