Oops... I upgraded my syslog-ng from 1.4 train to 1.6 train, and it doesnt like my old configuration file... It seems to be choking on the following line: [root@internal syslog-ng-1.6.0rc3]# /usr/local/sbin/syslog-ng -f /etc/syslog-ng.conf unresolved reference: DEFAULT Error initializing configuration, exiting. Here's my config: options { sync (0); time_reopen (10); log_fifo_size (1000); long_hostnames (off); use_dns (no); use_fqdn (no); create_dirs (no); keep_hostname (yes); }; source s_sys { pipe("/proc/kmsg"); unix-stream("/dev/log"); internal(); }; source s_net { udp(); }; destination d_cons { file("/dev/console"); }; destination d_mesg { file("/var/log/messages"); }; destination d_auth { file("/var/log/secure"); }; destination d_mail { file("/var/log/maillog"); }; destination d_spol { file("/var/log/spooler"); }; destination d_boot { file("/var/log/boot.log"); }; destination d_cron { file("/var/log/cron"); }; destination d_mlal { usertty("*"); }; destination d_udph { file("/var/log/$HOST/$YEAR/$MONTH/$DAY/$FACILITY.log" create_dirs(yes)); }; filter f_filter1 { facility(kern); }; filter f_filter2 { level(info) and not (facility(mail) or facility(authpriv) or facility(cron)); }; filter f_filter3 { facility(authpriv); }; filter f_filter4 { facility(mail); }; filter f_filter5 { level(emerg); }; filter f_filter6 { facility(uucp) or (facility(news) and level(crit)); }; filter f_filter7 { facility(local7); }; filter f_filter8 { facility(cron); }; log { source(s_net); filter(DEFAULT); destination(d_udph); }; #log { source(s_sys); filter(f_filter1); destination(d_cons); }; log { source(s_sys); filter(f_filter2); destination(d_mesg); }; log { source(s_sys); filter(f_filter3); destination(d_auth); }; log { source(s_sys); filter(f_filter4); destination(d_mail); }; log { source(s_sys); filter(f_filter5); destination(d_mlal); }; log { source(s_sys); filter(f_filter6); destination(d_spol); }; log { source(s_sys); filter(f_filter7); destination(d_boot); }; log { source(s_sys); filter(f_filter8); destination(d_cron); }; log { source(s_sys); filter(DEFAULT); destination(d_mesg); }; It seems to dislike this line (I guess): log { source(s_net); filter(DEFAULT); destination(d_udph); }; Is there no more a default filter? Or am I just being stupid and cannot see a simple error? Thanks, Brad