I just updated to 1.3.13 and decided to give the $LEVEL/$FACILITY destination a try. here is a snippet from my config file source src { internal(); unix-stream("/dev/log"); udp(); }; destination test { file("/var/log/syslog-ng/test/$HOST.$LEVEL.log"); }; log { source("src"); destination("test"); }; The log file i get though is interesting. here is an example file name homer.0x00000005.log Did i screw up something here? i get similar results using $FACILITY rather than $LEVEL... Chris Scheller System/Network Administration Network One Internet, inc. http://www.networkone.net/ 1.888.GOT-NET1