filter f_md_correction {
    match("\\[Self Heal\\]" value("MESSAGE"));
};

destination d_md_correction { file("/var/log/syno_md_correction.log"); };

log { source(src); filter(f_md_correction); destination(d_md_correction); };