I have the following filter set up: filter f_wireless_devices { host("system") flags(ignore-case); }; and I'm getting a syntax error. If I remove the flags(ignore-case), filter f_wireless_devices { host("system"); }; It is fine. On page 58 of the 3.0 sys admin guide, I have the syntax correct. Is there any other way to do this? Maybe put an ignore_case(yes) in the options sections at the top of the configuration file? Thanks, Paul ************************************ This email may contain privileged and/or confidential information that is intended solely for the use of the addressee. If you are not the intended recipient or entity, you are strictly prohibited from disclosing, copying, distributing or using any of the information contained in the transmission. If you received this communication in error, please contact the sender immediately and destroy the material in its entirety, whether electronic or hard copy. This communication may contain nonpublic personal information about consumers subject to the restrictions of the Gramm-Leach-Bliley Act and the Sarbanes-Oxley Act. You may not directly or indirectly reuse or disclose such information for any purpose other than to provide the services for which you are receiving the information. There are risks associated with the use of electronic transmission. The sender of this information does not control the method of transmittal or service providers and assumes no duty or obligation for the security, receipt, or third party interception of this transmission. ************************************