Hi, The warning about match means that match() without an explicit value() option tries to match against the value of the format $PROGRAM[$PID]: $MSGHDR$MSG which happens to be the same as $MSG in syslog-ng before 3.0. Post 3.0 these values were split, and to mimic the old behavior syslog-ng needs to create this artificial value which is a lot slower than matching against specific name value pairs. So either use match() with value('MSG') or use the more specific filters (message(), program() or whatever). This will improve performance. @version at the top of the file indicates which syslog-ng version the config was written for. It is only known by syslog-ng past 3.0. You may have started the old version in that case. You can BTW find support from BalaBit that can make your life much easier. Bazsi On Jun 19, 2015 7:39 PM, "Mason, Tron" <Tron.Mason@mail.house.gov> wrote:

*Hello…*

I’m getting the following errors. Please help. Thanks.

bash-3.2# /usr/local/sbin/syslog-ng -v -s -f /usr/local/etc/syslog-ng/syslog-ng.conf

WARNING: the match() filter without the use of the value() option is deprecated and hinders performance, please update your configuration;

bash-3.2# /usr/local/etc/syslog-ng/syslog-ng.conf -a -f /usr/local/sbin/syslog-ng

/usr/local/etc/syslog-ng/syslog-ng.conf: line 10: @version:: command not found

/usr/local/etc/syslog-ng/syslog-ng.conf: line 12: syntax error near unexpected token `('

/usr/local/etc/syslog-ng/syslog-ng.conf: line 12: `options { use_dns(yes); '

*Tron G Mason*

______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq