Hi there, On Fri, 12 Jan 2007 Phusion wrote: > httpd[....] and /websites/abc/test > ... > > I have tried the following. > > filter fd_httpd_test.abc.com { match("httpd[\[0-9]+\]") and ... Isn't filter fd_httpd_test.abc.com { program("httpd") and ... }; what you're looking for there? -- 73, Ged.