Hi Andrew, If you have a recent enough syslog-ng version, you can use the date-parser to parse your date. Otherwise, I guess you could use the current year $YEAR and add it to the message using a rewrite rule. Cheers