Re: [syslog-ng] Bazsi's blog: Syslog-ng correllation