I have copied the syslog.conf file from syslog-ng-2.0.0/contrib/rhel-packaging to /etc/syslog-ng.conf When I try running syslog-ng I get the following error "/usr/local/sbin/syslog-ng -f /etc/syslog-ng.conf syntax error at 17" Line 17 is file("/proc/kmsg" log_prefix "kernel:"); Which is in this script block # source s_local { unix-dgram("/dev/log"); file("/proc/kmsg" log_prefix "kernel:"); }; Did something change in version 2.0 that was not updated in the example? Or should I use the contrib app syslog2ng? I would like to create a config that will allow me to disable klogd and syslogd on RHES4. Then set syslog-ng up to listen for tcp syslog packets from remote systems and then separate those logs like this destination d_separatedbyhosts { file("/var/log/syslog-ng/$HOST/messages" owner("root") group("root") perm(0640) dir_perm(0750) create_dirs(yes)); }; Any help would be great, Thanks - Greg