[syslog-ng] expanding $HOST in 1.6.*

[t_esting at excite.com]

Hello, syslog-ng gurus.  I have been trying unsuccessfully to replicate syslog-ng 1.5.26 behavior over to the current stable release.  Specifically, here's what I can't seem to get to work from my config:

destination d_ipfilters_bymin   { file ("/var/logser/$HOST/$YEAR/$MONTH/$DAY/ipfilters.log.$HOUR.$MIN"
        owner(root) perm(0600) create_dirs(yes) ); };

filter f_fwsm_misc {
        match(" \%FWSM-") and
        match(": (Teardown|Translation|Built)");
        };

log { source(s_udp);  filter(f_fwsm_misc);   destination(d_ipfilters_bymin); };

With syslog-ng 1.5.26 (linked against libol 0.3.10 on Solaris 8 using GCC in 64-bit mode), this config writes my FWSM messages to /var/logser correctly.  I have been unable to do the same using either 1.6.8; the messages just fall through to my catchall destination.  

Can anyone offer some advice on how to reproduce the 1.5.x $HOST expansion behavior in 1.6.x?

Thanks in advance.

T.E.

_______________________________________________
Join Excite! - http://www.excite.com
The most personalized portal on the Web!