if $programname == 'systemd-logind' then stop
if $programname == 'systemd' then {
    if re_match($msg, "^.*Starting") then stop
    if re_match($msg, "^.*Stopping") then stop
    if re_match($msg, "^.*Started Session") then stop
    if re_match($msg, "^.*Configuration file .* is marked world-inaccessible.") then stop
    if re_match($msg, "^.*Started System Logging Service") then stop
    if re_match($msg, "^.*Created slice user") then stop
    if re_match($msg, "^.*Removed slice user") then stop
    if re_match($msg, "^.*[Mm]ail") then stop
}