if ($programname == 'monitor') or ($systemdunit == 'monitor.service') then stop