Re: [syslog-ng] Try again: What's wrong with my config?

Hi Dan, What people usually do to route logs based on the name of the application is something in the likes of: source s_system { system(); }; destination d_program { file("/var/log/${PROGRAM}.log"); }; log { source(s_system); destination(d_program); }; Notice the ${PROGRAM} macro inside the filename, which does the magic. I'm suggesting this as you seem to be struggling with filters and flags. Cheers, Fabien