Hi, Thank you very much for your reply. But as I am new in this so can you please be more specific that how can I use the Program() filter?? Let me again tell you my specific issue- I have a Tomcat server running and in that server I have 3 application or nodes that generates the logs and dump into tomcat server....Now when I use the syslog it gives me all the logs mix with the generating source name as the hostname (tomcat server)....but I want that syslog should give me the logs which has the field in it from which I can identify that this log is generated in this application and this is in other... So I hope I describe the problem to give you exact idea!! I will be thankful to you if you help me in this.
Could you show some lines from your log originating from different programs? I'm not familiar with tomcat, so I don't understand your issue exactly... Maybe the logs have a field which could be used to differentiate between your tomcat apps. Regards, Sandor -------------------------------------------------------- NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.