Yes that does the trick ! I've been looking for that format and couldn't find any official definition of template for that standard. thanks! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20080910/9ce37181/attachment.htm