[syslog-ng] matching by unknown field

Good Day Could someone tell how to match message by 'blah', the word before '@' ? """ May 22 21:28:29 blah@localhost/dns syslog-ng starting up; """ Thanks in advance