if ($programname startswith 'cgr-engine' or $programname startswith 'CGRateS' or $msg contains 'CGRateS') then {
    action(type="omfile" File="/var/log/cgrates/CGRateS.log")
    stop
}