I have all the hardware configured correctly. My problem is that I have separate filters setup for my MAX TNT and Cisco Gear to log into different directories. One...everything logs in both my Cisco and Modems directory and two I am no longer getting as much detail as I did with the Cisco Gear. below is my config for the Cisco Gear and TNT. #Logging for CISCO Devices destination d_cisco_devices { file("/var/log/cisco/$HOST.log"); }; # This is out destination file. Each host will get it's own log file # which is nice when you start using log checkers to email you about # things in your log file. filter f_cisco_info { level(info); }; filter f_cisco_notice { level(notice); }; filter f_cisco_warn { level(warn); }; filter f_cisco_crit { level(crit); }; filter f_cisco_err { level(err); }; filter f_cisco_debug { level(debug..emerg); }; # Sets up out filters. The thing to remember is Cisco's log at various # levels by default unlike a lot fo daemons. log { source(s_net); filter(f_cisco_info); destination(d_cisco_devices); }; log { source(s_net); filter(f_cisco_notice); destination(d_cisco_devices); }; log { source(s_net); filter(f_cisco_warn); destination(d_cisco_devices); }; log { source(s_net); filter(f_cisco_crit); destination(d_cisco_devices); }; log { source(s_net); filter(f_cisco_err); destination(d_cisco_devices); }; log { source(s_net); filter(f_cisco_debug); destination(d_cisco_devices); }; # Takes the logs our filters and passes them to our destination. Obviously # you can do some really interestng things with this, but I haven't # figured them out yet. #Logging for TNT MAX Devices destination d_modems_devices { file("/var/log/modems/$HOST.log"); }; # This is out destination file. Each host will get it's own log file # which is nice when you start using log checkers to email you about # things in your log file. filter f_modems_info { level(info); }; filter f_modems_notice { level(notice); }; filter f_modems_warn { level(warn); }; filter f_modems_crit { level(crit); }; filter f_modems_err { level(err); }; # Sets up out filters. log { source(s_net); filter(f_modems_info); destination(d_modems_devices); }; log { source(s_net); filter(f_modems_notice); destination(d_modems_devices); }; log { source(s_net); filter(f_modems_warn); destination(d_modems_devices); }; log { source(s_net); filter(f_modems_crit); destination(d_modems_devices); }; log { source(s_net); filter(f_modems_err); destination(d_modems_devices); }; # Takes the logs our filters and passes them to our destination. Obviously # you can do some really interestng things with this, but I haven't # figured them out yet. Evan Himmel Network Engineer PrimeLink, Inc. (518) 324-5465 http://www.primelink1.net