filter f_syslog { program(syslog-ng); }; destination d_syslog { file("/var/log/syslog.log"); }; log { source(src); filter(f_syslog); destination(d_syslog); };