Thanks, I understand. It's just hard sending this kind of stuff without potentially inadvertently sharing something I'm not supposed to. Either way, I think I have worked around the issue. -Mark -----Original Message----- From: syslog-ng <syslog-ng-bounces@lists.balabit.hu> On Behalf Of Fabien Wernli Sent: Wednesday, March 23, 2022 09:05 To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Subject: [EXTERNAL] Re: [syslog-ng] Value is dropped or unset in resolved destination template Hi Mark, It's really hard to tell what's happening without seeing your full configuration. Remember messages can go through multiple logpaths, some of which the variables are probably empty in. That being said, if I were you I'd use a default value for your macros in any case, much safer e.g.: destination d_default { file("`BASEPATH`/${location:-hidden}/$(lowercase ${HOST})/${app:-unknown}/$(lowercase ${HOST})_${app:-unknown}.log" create_dirs(yes) flags("threaded", "no-multi-line")); }; ______________________________________________________________________________ Member info: https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.balabit.hu%2Fmailman%2Flistinfo%2Fsyslog-ng&data=04%7C01%7Cmark.faine%40nasa.gov%7Cdf3b7016170246b9e56f08da0cd649bf%7C7005d45845be48ae8140d43da96dd17b%7C0%7C0%7C637836411758844542%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=ALqH3MyXmGYAeqms%2FZusFf1CATjfyvt6sqwVc7Hta5E%3D&reserved=0 Documentation: https://gcc02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fsupport%2Fdocumentation%2F%3Fproduct%3Dsyslog-ng&data=04%7C01%7Cmark.faine%40nasa.gov%7Cdf3b7016170246b9e56f08da0cd649bf%7C7005d45845be48ae8140d43da96dd17b%7C0%7C0%7C637836411758844542%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=9ytDQzSFwkdc1QeC%2B8Y3tTCQoZLdgeh586YrHscdhVQ%3D&reserved=0 FAQ: https://gcc02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fwiki%2Fsyslog-ng-faq&data=04%7C01%7Cmark.faine%40nasa.gov%7Cdf3b7016170246b9e56f08da0cd649bf%7C7005d45845be48ae8140d43da96dd17b%7C0%7C0%7C637836411758844542%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=fD7jsZOiRMyM8vJpr3GcWbcNVdR8Guieerhuepjy3Ss%3D&reserved=0