I'm trying to capture messages that are logged at a specific facility (kern) to a specific kernel.log file. Below are my definitions source kernel_file { file("/proc/kmsg"); }; destination kernel { file("/var/kernel/kernel.log");}; filter kern {facility(kern);}; log { source(kernel_file); filter(kern); destination(kernel);}; log { source(internal_src); filter(kern); destination(kernel);}; log { source(stream); filter(kern); destination(kernel);}; log { source(udp_src); filter(kern); destination(kernel);}; When I issue the following logger -p kern.info "test messages" The logs show up in my default message log. Am I missing something, this doesn't seem right...? I've configured it to take it from four different sources just to make sure it was being captured, as I think I only need the kernel_file source. This is on a redhat linux 7.0 pc. Thanks, Brian Seppanen seppy@chartermi.net 906-228-4226 ext 23