if $programname startswith 'rmon-server' then /var/log/rmon/rmon-server.log
& stop
