When syslog-ng recieves a tcp syslog from another host, it tags the front of the message with '127.0.0.1/127.0.0.1/' before the host ip that the message actually came from. It also makes the host variable for that message '127.0.0.1' instead of the host the message actually came from. So if I'm logging all messages from syslog-ng to a file called $HOST.txt, all of my tcp syslog messages (ie messages coming from another syslog-ng) are logged to 127.0.0.1.txt . Does anyone know of a workaround to this problem? Thanks, Mike