I defined ${MSG.UID} from a CSV parser so it's not a typo. What I want to achieve is to relate same messages having the same ${MSG.UID} -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20111116/7e28250a/attachment.htm