David hit it on the head. The messages I receive are on two seperate lines. The daemon calls for MountTape and on the next line I will get an "open failed". I understand the idea of swatch, we use it here, but I'm trying to kill two birds here. Syslog-ng has the capability of replacing swatch, I've already . I probably could write a small program to evaluate the MountTape, but I was hoping for a simpler solution. Jesse Keefe Analyst Convergys Corp -- NOTICE: The information contained in this electronic mail transmission is intended by Convergys Corporation for the use of the named individual or entity to which it is directed and may contain information that is privileged or otherwise confidential. If you have received this electronic mail transmission in error, please delete it from your system without copying or forwarding it, and notify the sender of the error by reply email or by telephone (collect), so that the sender's address records can be corrected.