filter f_synosnmpcd {
        program("synosnmpcd") or
        program("snmpd");
        not facility(auth);
};

destination d_synosnmpcd {
        file("/var/log/synosnmpcd.log");
};

log { source(src); filter(f_synosnmpcd); destination(d_synosnmpcd); };