When using correlating message with syslog-ng 3.3.1 i get only the value in the last matching rule but not the earlier.<br>Here is my patterndb.xml<br><br><br><blockquote style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;" class="gmail_quote">
&lt;?xml version=&#39;1.0&#39; encoding=&#39;UTF-8&#39;?&gt;<br>&lt;patterndb version=&#39;3&#39; pub_date=&#39;2011-11-07&#39;&gt;<br>   &lt;ruleset name=&#39;ecelerity&#39; id=&#39;12345678&#39;&gt;<br>      &lt;pattern&gt;ecelerity&lt;/pattern&gt;<br>
      &lt;rules&gt;<br>         &lt;rule provider=&#39;me&#39; id=&#39;123475980&#39; class=&#39;system&#39;<br>        context-scope=&#39;program&#39; context-id=&#39;${MSG.UID}&#39; context-timeout=&#39;10&#39;&gt;<br>        &lt;patterns&gt;<br>
           &lt;pattern&gt;@ESTRING:LOG.UTC:|@@ESTRING:LOG.UID:|@ORCPTS|@ANYSTRING:LOG.VAL:@&lt;/pattern&gt;<br>        &lt;/patterns&gt;</blockquote><blockquote style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;" class="gmail_quote">
<div>        &lt;examples&gt;<br>             &lt;example&gt;<br>            &lt;test_message program=&quot;ecelerity&quot;&gt;1319550976|c0a80a3c-b7f6c6d000002063-1f-4ea6c0004833|ORCPTS|s.andriamampianina@***.**&lt;/test_message&gt;<br>
            &lt;test_values&gt;<br>              &lt;test_value name=&quot;LOG.UTC&quot;&gt;1319550976&lt;/test_value&gt;<br>              &lt;test_value name=&quot;LOG.UID&quot;&gt;c0a80a3c-b7f6c6d000002063-1f-4ea6c0004833&lt;/test_value&gt;              <br>
              &lt;test_value name=&quot;LOG.VAL&quot;&gt;s.andriamampianina@***.**&lt;/test_value&gt;<br>            &lt;/test_values&gt;<br>             &lt;/example&gt;<br>          &lt;/examples&gt;              <br></div>
</blockquote><blockquote style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;" class="gmail_quote">     &lt;/rule&gt;<br>     &lt;rule provider=&#39;me&#39; id=&#39;123475981&#39; class=&#39;system&#39;<br>
            context-id=&#39;${MSG.UID}&#39;&gt;<br>        &lt;patterns&gt;<br>           &lt;pattern&gt;@ESTRING:LOG.UTC:|@@ESTRING:LOG.UID:|@SENDER|@ANYSTRING:LOG.VAL:@&lt;/pattern&gt;<br>        &lt;/patterns&gt;<br>        &lt;actions&gt;<br>
           &lt;action&gt;<br>              &lt;message&gt;<br>             &lt;values&gt;<br>                &lt;value name=&quot;MESSAGE&quot;&gt;From ${LOG.VAL}@1 to ${LOG.VAL}@2.&lt;/value&gt;<br>                        &lt;value name=&quot;TRIGGER&quot;&gt;yes&lt;/value&gt;<br>
                     &lt;/values&gt;<br>                  &lt;/message&gt;<br>               &lt;/action&gt;<br>            &lt;/actions&gt;<br>         &lt;/rule&gt;    <br>      &lt;/rules&gt;<br>   &lt;/ruleset&gt;<br>
&lt;/patterndb&gt;<br></blockquote><div><br> And the message i get is &quot;from *****@**.** to .&quot;<br>Where did I get wrong?<br></div>