On Thu, 2008-05-22 at 21:39 -0500, Dorian wrote: > Good Day > > Could someone tell how to match message by 'blah', the word before '@' ? > > """ > May 22 21:28:29 blah at localhost/dns syslog-ng starting up; > """ > host("^blah") -- Bazsi