So, a more compact (and more efficient) edit would be: # diff syslog-ng.conf.orig syslog-ng.conf 15a16,19filter mail { facility(mail); };22a27destination mail { file("/var/log/mail.log"); };31,32c36,37 < log { source(src); destination(messages); }; < log { source(src); destination(console_all); }; ---log { source(src); filter(mail); destination(mail); flags(final); }; log { source(src); destination(messages); destination(console_all); };Thank you (both) for your suggestions (and warnings)! ;-) ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html