log { source(src); destination(messages); }; log { source(src); destination(console_all); }; destination authlog { file("/var/log/auth.log"); }; filter f_authpriv { facility(auth, authpriv); }; log { source(src); filter(f_authpriv); destination(authlog); };