I've documented just about every part of my syslog-ng setup at work, and place it at http://www.campin.net/newlogcheck.html. It covers the whole deal, from reporting with custom log scanners, swatch, archiving to files and to a database, and more. This may save others time when they are starting out on their projects. This is a work in progress, but I'm sure it could be useful now. -- Nate Campi http://www.campin.net GnuPG key: 0xC17AEF79 Key fingerprint = BF12 722F 8799 E614 33CC FAB7 5A90 C464 C17A EF79 Your mantra for today is: Don't let data from the network near a shell. Bad things happen. -- Randall Schwartz