filter f_SynologyApplicationService { not (facility(auth) or facility(authpriv)) and (program('notification_send') or program('SYNO\.Personal')) };
destination d_SynologyApplicationService { file('/var/packages/SynologyApplicationService/target/logs/SynologyApplicationService.log'); };
log { source(src); filter(f_SynologyApplicationService); destination(d_SynologyApplicationService); };