source src { unix-stream /dev/log; }; destination messages { file /dev/tty9; }; destination other { file /dev/tty10; }; filter f_messages { level(info..warn) and not facility(auth, authpriv, cron, daemon, mail, news); }; log { source src; filter f_messages; destination messages; }; log { source src; destination other; };