rsyslog can monitor dir/files, so you could tell him to monitor /var/log/varnish/ncsa.log and send it through syslog to @somehost. and FWIW syslog-ng has been depreciated in favour of rsyslog. maybe wrong list indeed :) sz -- /"\ taste your favourite IT consultant \ / gpg public key http://www.guly.org/guly.asc X / \