Hi All I am using this as my conf file for my syslog-ng 1.6.3 w/ libol-0.3.13 to gather logs from cisco. But it is not logging. I am running it on Solaris 9. Notice I can get the log on local7 that points to /var/log/cisco IF I use Solaris's syslogd options { sync (0); time_reopen (10); log_fifo_size (1000); long_hostnames (off); use_dns (yes); use_fqdn (yes); create_dirs (no); dir_perm(0755); perm(0644); chain_hostnames(no); keep_hostname (yes); }; source net { udp (ip(1.2.0.94) port(514)); }; # local7.crit;local7.warn;local7.info;local7.debug /var/log/cisco filter f_cisco { facility(local7) and level(debug...emerg); }; destination d_cisco { file("/var/log/cisco" create_dirs(yes)); }; log { source(net); filter(f_cisco); destination(d_cisco); }; My snoop/tcpdump gets the SYSLOG pkts fine. Any idea why is it not writng the log with syslog-ng but ONLY with syslogd? I never run both daemons at the same time Thanks for the help/suggestion -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu There's no place like 127.0.0.1