Renner, Let me ask youa question. I notice that syslog-ng only processes the unixstream source when it shuts down. What do I need to set so that it processes them as they happen. TIA