if $programname == 'www' then /var/log/www.log
& stop