

#yum
if $programname == "yum" and ( $msg startswith " Installed" or $msg startswith " Erased" or $msg startswith " Updated" )   then stop

