I believe you are using the incorrect month code, I believe it should be %M: %m month in digits %M month, three letter English abbreviation http://www.analog.cx/docs/logfmt.html Lawrence Lee UserLand Software www.userland.com