Hi Evan, Sounds similar to something which has been fixed a month ago [1]. Could you check out the patch? Cheers [1] https://github.com/balabit/syslog-ng/issues/658