Hi, I'd like to filter out the syslog-ng logs that I get in my /var/log/messages file. Can I use a command-line flag to turn off these logs?: Jun 4 10:20:00 ldap1 syslog-ng[84369]: io.c: do_write: write() failed (errno 32), Broken pipe Jun 4 10:20:00 ldap1 syslog-ng[84369]: Connection broken, reopening in 60 seconds Jun 4 10:21:00 syslog1 syslog-ng[274]: AF_INET client connected from 127.0.0.1, port 1046 If not, can will the following filter work? filter f_nosyslog-ng { program("syslog-ng") and ( match("io\.c\:") or match("Connection\ broken\,\ reopening") or match("SIGHUP") or match("AF_INET_client") ); }; Did I use the brackets correctly? filter foo { program() and (match() or match() ); }; I'm no expert with regular expressions or syslog-ng filters, so bear with me :) As well, I'm using a tcp connection over stunnel, I would assume that it is normal to receive these messages occasionally? Thanks, Eric Parusel Systems Administrator Global Relay Communications