> > have you tried including "file (/dev/kmsg)" as a source? I have the Of course, this should read /proc, rather than /dev. Apologies, Ger.