Hello I use this regexp: match ="FlashLog: ([0-9a-zA-Z]+)-([0-9a-zA-Z]+)-([0-9]{4})-([0-9]{2})- ([0-9]{2})-([0-9]{2})-([0-9]{2})-([0-9a-zA-Z]+)"); and this df_out: destination df_out { file("/var/log/client/flashlog/${1}/${8}_.txt"); }; I have /var/log/client/flashlog/_.txt file. What is the problem? Best Regards: csaba