OK - sorted :-) Somebody mentioned using "CLASS=" - success :-) HOST=* SERVICE=msgs CLASS=linux TIME=w:0800:1830 COLOR=red many thanks all for all your help. didds -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.xymon.com/pipermail/xymon/attachments/20180831/ada87184/attachment.html>