[syslog-ng]Writing a custom filter