if $programname == 'lit' then /var/log/lit.log
& stop