if $programname == 'postfix' then /var/log/postfix.log