User: dlang Forumlink: http://kb.monitorware.com/viewtopic.php?p=25218#p25218 Message: ---------- another way of doing this on current versions is: if $fromhost-ip == ['192.168.1.238' , '192.168.1.239', '192.168.1.240' ] then { /var/log/rsyslog/testgear stop }