>>I think the following scheme

 >>func do_syslog (line)
 >>{
 >>   if (match1(line)){
 >>      action1(line)
 >>   }elif if (match2(line)){
 >>      action2(line)
 >>   }elif ...
 >>   ...
 >>}

 >>scheme is a reasonable alternative.

> This just drops a valuable feature: logging events to
> multiple destinations independently.
For what reason you quote this part of my message? ;)
Please, read it carefully first.

-- 
Best regards, Aleksey Cheusov.