When logging from an AIX server, the format of the message can be <$PRI>$DATE Message forwarded from $HOST: $MESSAGE and syslog-ng handles this quite nicely, however, if an AIX machine is configured to use the "-s" option (short version) to the AIX syslogd subsystem, the message may be of the format <$PRI>$DATE From $HOST: $MESSAGE It would be nice if syslog-ng handled this as well. I realize that I am asking for syslog-ng to "fix" another vendors problem, but in IBM's defense, starting in AIX 5.2 there is a "-n" option to syslogd that prevents it from prepending anything to a message, resulting in <$PRI>$DATE $MESSAGE unfortunately, there is no host at all. -- Evan Rempel erempel@uvic.ca Senior Programmer Analyst 250.721.7691 Computing Services University of Victoria