I've been getting a constant stream of these messages in my syslog-ng log, as much as 70MB worth per day: Jan 19 13:43:39 i-dl385 syslog-ng[25668]: Duplicate stats counter; counter='file(/var/log/logs/$R_YEAR/$R_MONTH/$R_DAY/$HOST-messages.log)' Jan 19 13:43:40 i-dl385 syslog-ng[25668]: Duplicate stats counter; counter='file(/var/log/logs/$R_YEAR/$R_MONTH/$R_DAY/$HOST-messages.log)' Jan 19 13:43:40 i-dl385 syslog-ng[25668]: Duplicate stats counter; counter='file(/var/log/logs/$R_YEAR/$R_MONTH/$R_DAY/$HOST-messages.log)' What does this mean? Are stats getting collected properly? Is there a bug in the stats stuff? Turning on debugging doesn't yield any more useful information... I'm using syslog-ng 1.9.8. The relevant portion of syslog-ng.conf looks like this: source s_external_syslog { udp(port(514)); }; source s_internal_syslog { unix-dgram("/dev/log"); file("/proc/kmsg" log_prefix("kernel:")); }; template t_human_readable { template("$R_FULLDATE $HOST $FACILITY.$PRIORITY $MESSAGE\n"); template-escape(no); }; destination d_host_messages { file( "/var/log/logs/$R_YEAR/$R_MONTH/$R_DAY/$HOST-messages.log" template(t_human_readable) create_dirs(yes) owner(root) group(root) perm(0644) dir_perm(0755) ); }; destination d_big_messages { file ( "/var/log/logs/messages.log" template(t_human_readable) owner(root) group(root) perm(0644) ); }; log { source(s_external_syslog); source(s_internal_syslog); destination(d_big_messages); destination(d_host_messages); }; -- Paul Krizak 5900 E. Ben White Blvd. MS 625 Advanced Micro Devices Austin, TX 78741 Linux/Unix Systems Engineering Phone: (512) 602-8775 Microprocessor Solutions Sector