It seems that syslog-ng thinks you're looking for $DAY_ and not $DAY. Try to replace the underscore by a dot, or RTFM to see if syslog-ng supports specifying variables that way : ${DAY}. Regards, J. -----Original Message----- From: William Pope [mailto:pope.william@epa.gov] Sent: Mon 8/25/2003 20:43 To: syslog-ng@lists.balabit.hu Cc: Subject: [syslog-ng]$DAY in I recently upgraded syslog-ng from version 1.4.17 to 1.6.0rc3. After the upgrade, the system logs do not include the DAY when sent to the following destination. destination hosts { file("/var/adm/logs/$HOST/$YEAR/$MONTH/$DAY_$FACILITY"); }; I get logs like /var/logs/HOST/2003/08/kern.log instead of /var/logs/HOST/2003/08/25_kern.log like I did with version 1.4.17. The day and the underscore are missing. I am using the same conf file as 1.4.17. Any help would be greatly appreciated! I am sure I am missing something stupid. Thank you, Will ------------------------------------------------------------------- This is a PRIVATE message, intended for the designated recipient(s) only and may contain privileged or confidential information. If you have received this message in error, please notify me immediately, delete the original, and destroy any paper copies. Any other use of the email by you is prohibited. NOTE: Regardless of content, this e-mail shall not operate to bind the sender to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.