I just sent an email off to one of the syslog-ng developers to see if they have support for this... http://tools.ietf.org/search/rfc5424#section-6.3 .Seth