User: jamesinterpass Forumlink: http://kb.monitorware.com/viewtopic.php?p=25455#p25455 Message: ---------- Thanks again for your ideas. Where do I put the rule you suggested? Do I create a ruleset file? Where does this file need to be located and how is it referenced from rsyslog? James