Is there any way to configure syslog-ng to exit the matching rules upon it's first match, much as most firewalls do (it appears that all matching rules are checked even after a match has been made). This would make my config file much simpler and presumably ease processing resources. If this feature doesn't currently exist, wouldn't it be a cool addition to future releases! ------------------------ William Fanselow Level(3) Communications 720.888.8363 ------------------------