filter f_crond { program(synocrond) and level(warn..emerg); };
destination d_crond { file("/var/log/synocrond.log"); };
log { source(src); filter(f_crond); destination(d_crond); };