I have a fairly standard line log stanza, which records module-failure-message: ... MODULE_MESSAGE=%{%{%{request:Module-Failure-Message}:-%{session-state:Module-Failure-Message}}:-NONE} ... There are some failures it does not record. For example (taken from radius.log): Tue Jan 3 11:16:20 2017 : Info: (125679) eap_peap: The users session was previously rejected: returning reject (again.) Mon Jan 9 10:06:53 2017 : Error: rlm_eap (EAP): No EAP session matching state 0xe679227be27f3b1e Mon Jan 9 10:03:19 2017 : ERROR: (165330) eap: ERROR: Malformed EAP Message: Malformed EAP packet. Length in packet header does not match actual length I can correlate the entries by time manually, but this makes things rather tedious; is there any way I can capture these in using linelog? Regards, Adam Bishop gpg: E75B 1F92 6407 DFDF 9F1C BF10 C993 2504 6609 D460 jisc.ac.uk --- linelog rp_log { filename = syslog format = "" reference = "idp_log.%{%{reply:Packet-Type}:-format}" idp_log { Access-Accept = "radiusd-idp-log#DOMAIN=${jisc_domain}#LOCATION=${jisc_location}#SERVICE=%{%{Service-Class}:-NONE}#ORG=%{%{request:operator-name}:-%{request:Stripped-User-Domain}}#USER=%{User-Name}#CSI=%{Calling-Station-Id}#NAS=%{Called-Station-Id}#CUI=%{reply:Chargeable-User-Identity}#RESULT=OK#REPLY_MESSAGE=%{%{reply:reply-message}:-NONE}#MODULE_MESSAGE=%{%{%{request:Module-Failure-Message}:-%{session-state:Module-Failure-Message}}:-NONE}#" Access-Reject = "radiusd-idp-log#DOMAIN=${jisc_domain}#LOCATION=${jisc_location}#SERVICE=%{%{Service-Class}:-NONE}#ORG=%{%{request:operator-name}:-%{request:Stripped-User-Domain}}#USER=%{User-Name}#CSI=%{Calling-Station-Id}#NAS=%{Called-Station-Id}#CUI=%{reply:Chargeable-User-Identity}#RESULT=FAIL#REPLY_MESSAGE=%{%{reply:reply-message}:-NONE}#MODULE_MESSAGE=%{%{%{request:Module-Failure-Message}:-%{session-state:Module-Failure-Message}}:-NONE}#" } } Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 2881024, VAT number GB 197 0632 86. The registered office is: One Castle Park, Tower Hill, Bristol BS2 0JA. T 0203 697 5800.