if $programname == 'rngd' and re_match($msg, "stats:.*") then stop