When regexing in syslog-ng, does this stament below do: get all local7 ( all levels ) and _/ALSO/_ match %ETHC-5 / %CLEAR-5 ? Its not just matching those is it ? Im kinda confused on this syntax. filter f_local7 { facility(local7) and level(debug..emerg) and match("%ETHC-5") and match("%CLEAR-5"); }; I just want to make shure that is what this is doing... . Thanks all. ~!>D