if $programname startswith "CGRateS" or $programname startswith "cgr-engine" then  /var/log/cgrates/CGRateS.log
& stop