Thanks. I figured out exactly what both of you responded with before you emailed me back. Thanks for the help. Phusion On 1/12/07, G.W. Haywood <ged@jubileegroup.co.uk> wrote:

Hi there,

On Fri, 12 Jan 2007 Phusion wrote:

...

httpd[....] and /websites/abc/test ...

I have tried the following.

filter fd_httpd_test.abc.com { match("httpd[\[0-9]+\]") and ...

Isn't

filter fd_httpd_test.abc.com { program("httpd") and ... };

what you're looking for there?

--

73, Ged. _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html