Howdy, I recently installed the same config file I had in 1.6.0rc1(or rc2?) on redhat 7.3 to a system with syslog-ng 1.6.2 with redhat 9... My log files are not being written in the format that I would expect (or that they WERE on the old box).. I would expect the following rule to write to the file: /var/log/hosts/webserver1/2004/02/24/webserver1_messages_2004_02_24 Instead I get: /var/log/hosts/webserver1/2004/02/24/messsages_24 The rule: destination messages.network { file("/var/log/hosts/$HOST/$YEAR/$MONTH/$DAY/$HOST_messages_$YEAR_$MONTH_$DAY" owner(root) group(sysadmin) perm(0640) dir_perm(0700) create_dirs(yes) ); }; This happens with all similar destination rules. The $year, $month, $host, etc work fine in the first portion of the destination, but they don't all work in the filename.. but $day does for some strange reason. I can provide my full 164 line config file on request, but all destinations are setup the same as this one, and all get the same result. What am I missing here? :) __________________________________ Do you Yahoo!? Yahoo! Mail SpamGuard - Read only the mail you want. http://antispam.yahoo.com/tools