[syslog-ng]filter match usage