Hi list, I'm trying out syslog-ng for only an hour now, and got it logging all udp traffic to one file fine, but now I think I'm doing stupid, althoug this seemed logical to me: options { use_fqdn(yes); use_dns(yes); dns_cache(yes); keep_hostname(yes); long_hostnames(on); sync(1); log_fifo_size(1024); create_dirs(yes); }; source s_1 { udp(ip(192.168.1.2) port(514)); source s_2 { udp(ip(192.168.2.2) port(514)); destination d_1 { file("/var/log/1.log"); }; destination d_2 { file("/var/log/2.log"); }; log { source(s_1); destination(d_1); }; log { source(s_2); destination(d_2); }; It poops an error: ] mini:/var/log root# syntax error at 14 Parse error reading configuration file, exiting. (line 14) Thanks for your insight. - jacco