Hi, For those interested I added the following filters to syslog-ng: host(regexp) - filters based on the host part of a log message match(regexp) - filters based on message contents And changed the program filter to use regexps instead of simple strings. CVS instructions can be found on the web page. -- Bazsi PGP key: http://www.balabit.hu/pgpkey.txt, or finger bazsi@balabit.hu