Hi all! Here is a part from my .conf file: #################################################################### source udp_mesg { udp( port(514));}; destination d_locals{ file("/var/log/test/$HOST/$FACILITY_$LEVEL/$DAY.$MONTH.$YEAR.log" owner("root") group("adm") perm (0640) dir_perm(0740) create_dirs(yes));}; log { source(udp_mesg);filter(f_messages);destination(d_locals);}; #################################################################### It logs fine, still without facilities, but the problem comes perhaps from my devices, not from syslog-ng. The strange what happend is: As I listed the directories in my log-directory, I found out, that there are about hundred hidden dierectories. I log from tho devices, and there were, as it should be, two dirs for their logs. But in the hidden directories(.00 to .99) there were logs from the devices, most from severity 'notice'. Has anyone idea, what could be the problem? cheers Dian P.S. How can I get ------------------------------------------------------------- Windows 95/NT - 32 bit extensions and a graphical shell for a 16 bit patch to an 8 bit operating system originally coded for a 4 bit microprocessor, written by a 2 bit company that can't stand 1 bit of competition.