* Steve (gentoo_sjh@shic.co.uk) [23.03.09 20:27]: > Steve wrote: > >> destination sshguardproc { > >> program("/usr/local/sbin/sshguard" > >> template("$DATE $FULLHOST $MESSAGE\n")); > >> }; > >> program() only takes 1 argument: the programname. Any thing you want to pass, you have to define via a log statement. BTW: Just curious: you do not use the sshguard from portage, or why is it a /usr/local/sbin? HTH Sebastian -- " Religion ist das Opium des Volkes. " Karl Marx SEB@STI@N GÜNTHER mailto:samson@guenther-roetgen.de