Syslog Alerts

I'm just starting to build some syslog alerts and have been asked if I could do some that pick up specific ports from the firewall.

I've tried using *4444 but that brings back anything with 4444 in it, is there anyway of restricting it down to 4444 as the outbound port?

Thanks

Jon

IT Infrastructure Manager
Pilgrim Hospital
UK