Hi~ when I use syslog for collecting logs (from network device Route, L2 switch, L4 switch, ) there are no prolbems. => raw log(which is shown in network device) Nov 22 18:46:48 [11.114.116.15.1.2] NOTICE WebOS : real server 211.11.11.111 operational =>log that syslog get Nov 22 18:46:48 [11.114.116.15.1.2] NOTICE WebOS : real server 211.11.11.111 operational nochange!!!!!!!!!!!!!!!!!!!!!! --------------------------- however when I use syslog-ng for collecting logs, the raw log(above) has changed like this~ Nov 22 18:46:48 NOTICE WebOS : real server 211.11.11.111 operational [11.114.116.15.1.2] gone!!!!!!!!!! I think syslog-ng ommit "[11.114.116.15.1.2]" area. Between network device and syslog-ng server , there are no syslog, syslog-ng servers. Do you have same problem? plz help me i use Linux EL4, syslog-ng 1.6.9