Hi, I run syslog-ng 2.0 on RH el4. the local time zone here is CDT My template is: destination d_localhost { file("/logs/local_host/$FACILITY-$YEAR-$MONTH-$DAY.log" template("$DATE $HOST $MSG [recv-frm:$SOURCEIP $R_ISODATE $S_ISODATE $TZ dte:$R_DATE $FACILITY.$LEVEL] \n"); }; The log data is: Mar 25 15:01:01 sopher crond[31974]: (root) CMD (run-parts /etc/cron.hourly) [recv-frm:127.0.0.1 2008-03-25T15:01:01+05:00 2008-03-25T15:01:01+05:00 -05:00 dte:Mar 25 15:01:01 cron.info] Why do I have +05:00 in the ISODATES : $R_ISODATE: 2008-03-25T15:01:01+05:00 $S_ISODATE: 2008-03-25T15:01:01+05:00 When TZ is right? $TZ: -05:00 -frank-