I have pushed a fix to 3.4 master[1], it was a stupid copy & paste mistake. [1]: https://github.com/balabit/syslog-ng-3.4/commit/d24e7add4bdc9143025f6165d4c8ec472dc89586.patch -- |8]