We tried putting a file source with owner and permissions in our syslog-ng configuration: file("/var/log/usenetmonitor/dev/cron-logs/Usenetmonitor-Warnings.log" flags(no-parse) program-override("custom-test") owner(-1) group(-1) perm(-1)); And at startup we get: Error parsing affile, syntax error, unexpected KW_OWNER, expecting KW_NORMALIZE_HOSTNAMES or KW_USE_DNS or KW_USE_FQDN or KW_DNS_CACHE in /etc/syslog-ng/conf.d/remote_syslog.conf at line 4, column 123: file("/var/log/usenetmonitor/dev/cron-logs/Usenetmonitor-Warnings.log" flags(no-parse) program-override("custom-test") owner(-1) group(-1) perm(-1)); ^^^^^ So the documentation is correct, the options are not valid on file sources. But it would be a good thing if they were -- Jim Segrave jes@j-e-s.net