[syslog-ng]Re: Log analysis