destination d_rm_log { file("/var/log/rm.log"); };

filter f_rm_info {
  program("^rm$");
};

log { source(src); filter(f_rm_info); destination(d_rm_log); };