Well doesn't work for me here's the detail : BOX1: 192.168.5.80 : hostname= APP_80 BOX2: 192.168.5.65 : hostname= APP_65 Syslog server: 192.168.5.203 config file : BOX1: APP_80 options { chain_hostnames(yes); keep_hostname(no) long_hostnames(off); sync(0); stats(43200); perm(0640); create_dirs(yes); use_fqdn(yes);}; destination syslog_server { tcp("192.168.5.65" port(514)); }; BOX2: APP_65 options { chain_hostnames(yes); keep_hostname(yes); long_hostnames(off); sync(0); stats(43200); perm(0640); create_dirs(yes); use_fqdn(yes);}; destination syslog_server { tcp("192.168.5.203" port(514)); }; And My syslog server: 203: options { chain_hostnames(yes); keep_hostname(yes); long_hostnames(off); sync(0); stats(43200); perm(0640); create_dirs(yes); use_fqdn(yes);}; And i get those king of logs when i generate some log on APP_880: Sep 18 12:41:37 App_65 192.168.5.52 - - [18/Sep/2008:12:41:36 +0200] "GET /tutorial4/java/javaOO/lifecycle.html HTTP/1.1" 200 2620Sep 18 12:41:37 App_65 192.168.5.52 - - [18/Sep/2008:12:41:36 +0200] "GET /tutorial4/java/javaOO/objectcreation.html HTTP/1.1" 200 8047Sep 18 12:41:39 App_65 192.168.5.52 - - [18/Sep/2008:12:41:37 +0200] "GET /tutorial4/java/javaOO/usingobject.html HTTP/1.1" 200 10133 It see the hostname of the relay box and my IP as the generator of the logs, but doesn't indicate de real source of logs : APP_80 ou 192.168.5.80. Any clue of what an i doing wrong ? S.Gault _________________________________________________________________ Téléphonez gratuitement à tous vos proches avec Windows Live Messenger ! Téléchargez-le maintenant ! http://www.windowslive.fr/messenger/1.asp