filter f_mcelog { program(mcelog);  };
filter f_mcelog_sev { level(info..emerg) };
filter f_no_auth { not facility(auth); };
destination d_mcelog { file("/var/log/mcelog.log"); };
log { source(src); filter(f_mcelog); filter(f_mcelog_sev); filter(f_no_auth); destination(d_mcelog); };