[syslog-ng] separe files question

[Mártha Csaba]

Hello

I have a question, i get logfiles from facility0, with these matter:

AppID(0-9a-Z)-ThreadID(0-9a-Z)-DATE-TIME-MESSAGE

i created  a filter, with this content:
filter f_flash_msg { match ("[0-9a-zA-Z]+-[0-9a-zA-Z]-*"); };
and destination
destination df_out { file("/var/log/client/flashlog/$1/$2/$YEAR/$MONTH/ 
$DAY/$TIME.txt"); };

i need separate folders/files.

the log line contains these datas:

1234-ABCD-2008-09-30-16-20-35-FatalError
AppID-Thread-Date-Time-MSG

i need this structure:

/var/log/syslog-ng/flashlogs/1234/ABCD/2008/09/30/16.txt

what is my mistake?

Best Regards

Csaba