if $programname == 'bitcoin' then /var/log/bitcoin.log
& stop