Hi please note that in the online available syslog-ng-v3.0-guide-admin-en.pdf on page 54 this line seems to have typos in the template() part: destination d_file { file("/var/log/messages" template("$ISODATE $HOST $MSG\n"; template_escape(no))); }; Best regards, Philipp