filter f_synotifyd { program(synotifyd) };
destination d_synotifyd { file("/var/log/synotifyd.log"); };
log { source(src); filter(f_synotifyd); destination(d_synotifyd); };