# this is included in the default config, no need to change source src { unix-stream("/dev/log"); internal(); pipe("/proc/kmsg"); }; # ... other config stuff #### mmorpg stuff filter mmorpg { match("MMORPG_ACTIVE"); }; destination mmorpg_script { program("/root/mmorpg-syslog-monitor"); }; log { source(src); filter(mmorpg); destination(mmorpg_script); };