destination d_slapd { file("/var/log/slapd.log"); };
filter f_slapd { program(slapd) and not match("^SYNO#" value("MESSAGE")); };
log { source(src); filter(f_slapd); destination(d_slapd); };