Hmmm...getting an error: $ /usr/local/sbin/syslog-ng syntax error at 1 Parse error reading configuration file, exiting. (line 1) here is what the conf looks like: options { use_fqdn(yes); keep_hostname(yes); use_dns(yes); long_hostnames(off); use_time_recvd(no); chain_hostnames(no); log_fifo_size(300); mark(0); sync(0); }; source src { unix-dgram("/var/run/log"); udp(); internal(); file ("/dev/klog"); }; # local0.* %/var/log/filter.log filter f_1 { facility(local0) and level(debug...emerg); }; destination d_1 { file("/var/log/filter.log"); }; log { source(local); filter(f_1); destination(d_1); }; # local7.* %/var/log/dhcpd.log filter f_2 { facility(local7) and level(debug...emerg); }; destination d_2 { file("/var/log/dhcpd.log"); }; log { source(local); filter(f_2); destination(d_2); }; # *.notice;kern.debug;lpr.info;mail.crit;news.err;local0.none;local7.none %/var/log/system.log filter f_3 { facility(mail) and level(crit...emerg); }; filter f_4 { facility(news) and level(err...emerg); }; filter f_5 { not facility(local0); }; filter f_6 { not facility(local7); }; filter f_7 { level(notice...emerg); }; filter f_8 { facility(kern) and level(debug...emerg); }; filter f_9 { facility(lpr) and level(info...emerg); }; destination d_3 { file("/var/log/system.log"); }; log { source(local); filter(f_3); filter(f_4); filter(f_5); filter(f_6); filter (f_7); filter(f_8); filter(f_9); destination(d_3); }; # security.* %/var/log/system.log filter f_10 { facility(security) and level(debug...emerg); }; log { source(local); filter(f_10); destination(d_3); }; # auth.info;authpriv.info;daemon.info %/var/log/system.log filter f_11 { facility(auth) and level(info...emerg); }; filter f_12 { facility(authpriv) and level(info...emerg); }; filter f_13 { facility(daemon) and level(info...emerg); }; log { source(local); filter(f_11); filter(f_12); filter(f_13); destination (d_3); }; # *.emerg * filter f_14 { level(emerg); }; destination d_4 { file("*"); }; log { source(local); filter(f_14); destination(d_4); }; TIA, Chet