Hello everyone, ive just set up a syslog-ng remote logging server that logs through stunnel with theese rules: destination hosts { file("/var/log/hosts/$HOST/$YEAR/$MONTH/$DAY/$HOST-$YEAR-$MONTH-$DAY/$FACILITY" owner(root) group(wheel) perm(0600) dir_perm(0700) create_dirs(yes)); }; source recieved { tcp(ip("127.0.0.1") port(515) keep-alive(yes)); }; log { source(recieved); destination(hosts); }; The logging works, but the logs is put into "/var/log/hosts/---/$FACILITY", _NOT_ into "/var/log/hosts/$HOST/$YEAR/$MONTH/$DAY/$HOST-$YEAR-$MONTH-$DAY/$FACILITY" Am i doing something wrong? I just upgraded both stunnel and syslog-ng to the lastest version, before that everything worked fine, but now its fucked up.. thanks / neon