hello, I have allready posted my syslog-ng problem to this mailinglist on friday; now, I hope I can make things more clear: I am using Suse8.0 with syslog-ng to monitor enterasys ans cabletron network equipment (switches, routers.... ); and have some problems with the configuration: in my syslog-ng.conf: destination local7 { file("/var/log/syslog-ng/$HOST/local7.log" sync(0) log_fifo_size(10) create_dirs(yes) owner(root) group(system) perm(0660) dir_perm(0770)); }; because of this configuration a system message like: "Jul 15 13:56:28 %STP-I-PORT_STATUS,/10.146.12.16 Port status change detected: et.3.6 - Port Up" should be stored in "/var/log/syslog-ng/10.146.12.16/local7.log" but it´s stored in: "/var/log/syslog-ng/%STP-I-PORT_STATUS,/local7.log". what can i do?? Please help me!!! Thanks in advance manfred