Hi all - Anyone know how to setup the syslog-ng conf file so that certain events can be filtered from being inserted into the db ? i.e. I am setup now with various log { source(src); filter(f_mail); destination(mailwarn); }; type rules - this works great - I can filter any log message into any folder - Later in my conf I have: log { source(src); destination(d_mysql); }; Which tosses everything into the db - but how do I tell it to take everything except for given filters? Any thoughts appreciated, Edward