> Did you try $SEC instead of $SECOND? I've actually tested it with template("") to see if the mistake was in that part of the syntax. Still had the same error, also tried the same config file under syslog-ng 1.6.2 to no avail.