if $programname == 'dovecot' then /var/log/dovecot.log