Hello I like to have the following logfile names: /var/log/remote/proxy.d.westend.com.2002-03-05.log or at least /var/log/remote/212.117.2.4.2002-03-05.log /var/log/remote/212.117.4.5.2002-03-05.log etc. Strangely, now I have a file /var/log/remote/proxy.2002-03-05.log which contains data from both, proxy.d.westend.com and proxy.westend.com. And, in addition, when trying to turn of hostname lookup, all syslog-ng exporters still have filenames with their short hostnames and all syslog (old) exporters have IPs as hostnames! /var/log/remote/proxy.2002-03-05 /var/log/remote/212.117.77.123.2002-03-05 (of course I restarted the server after each modification) On all three syslog-ng hosts (2xProxy and 1xCollector) I use syslog-ng-1.5.13. My collector config looks like this: options { long_hostnames(on); use_dns(no); use_fqdn(on); keep_hostname(on) chain_hostnames(on); use_time_recvd(yes); sync(0); mark(120); log_fifo_size(1000); }; source remote { udp(); tcp(); }; destination westend_remote_hosts_dir { file("/var/log/remote/$HOST.$YE..... Any ideas, how to archive "proxy.d.westend.com.2002-03-05.log"? The content of the files is uninteresting, although chained hostnames would be nice if I ever log over more than one host. bye, -christian- -- Christian Hammers WESTEND GmbH - Aachen und Dueren Tel 0241/701333-0 ch@westend.com Internet & Security for Professionals Fax 0241/911879 WESTEND ist CISCO Systems Partner - Premium Certified