anchor.diff:  log {
           source(s_all);
           filter(f_syslog);
  +        filter(f_not_rails_apps);
  +        filter(f_not_passenger);
           destination(df_syslog);
   };
   
  
positive.code: log {
          source(s_all);
          filter(f_debug);
          destination(df_debug);
  };
  
  
negative.code: log {
          source(s_all);
          filter(f_user);
          filter(f_not_rails_apps);
          filter(f_not_passenger);
          destination(df_user);
  };
  
  