Hi! Please start syslog-ng with -Fedtv flags, and copy the output here. Regards, Attila ________________________________ From: syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Zhang, Husen <Husen.Zhang@leidos.com> Sent: Wednesday, December 11, 2019 7:09 PM To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Cc: Gupta, Rakesh <Rakesh.Gupta@leidos.com> Subject: Re: [syslog-ng] json destination config help CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe. The problem is that with this d_json config, syslog-ng will NOT start. Any suggestion? Hi community, I’m trying to have syslog-ng to write logs to json. My d_json_syslog-ng.conf: [cid:image001.png@01D5B024.2FC3A5C0] ├── conf.d │ ├── d_json_syslog-ng.conf │ └── es.conf.bak ├── patterndb.d ├── scl.conf └── syslog-ng.conf