Hi, Just so you know, there will be a rewrite function to set facility (and severity) in the near future: https://github.com/syslog-ng/syslog-ng/pull/3136