Using syslog-ng 1.4.4: [root@utumno /etc]# /usr/local/sbin/syslog-ng -d -f /etc/syslog-ng.conf io.c: Preparing fd 3 for reading io.c: listening on fd 4 Warning: Internal messages are not referenced, they'll go to /dev/null unresolved reference: f_ruby Error initializing configuration, exiting. This is the filter it is talking about: filter f_ruby { host(ruby.domain.com); }; Cheers, Nick -- Secure email preferred. PGP key available on request. Phone: +61 2 9025 7571 || Email: nickbrawn@onetel.com