if $programname == 'haproxy' and $msg contains 'backend = "monbackend"' then {
    action(type="omfile" file="/var/log/haproxy-traffic-monbackend.log")
    stop
}