Hi, I have to following task. I have some messages coming from a host from local5. The messages look like: "Sep 6 17:07:21 herakles local5:meimlo.std.me herakles.tomcat8310 2004-09-06 17:07:21,157 [WARN] [main] [] [] voicemail.mboxp.MboxpServlet: MboxpServlet not initialized" The thing I have to is to make a filter that matches the things between 'local5:' and the first ' '. In this case the filter is 'meimlo.std.me' but this 'meimlo.std.me' could be anything like: 'blah.blu.admin'. Is there a possibility to create a filter that if that string is different, syslog-ng will automate create a new file? Like it does when a new host is logging and it creates the dirs/files. Does syslog-ng support such a function? Regards, Iulian Topliceanu