> What I use is LogMuncher to watch my syslog files on a central log > host, and it mails me about any messages I need to see. Then I get all > the important messages in my mail client. I've been using swatch in conjunction with some of my own scripts to do a similar job. Look at SEC (simple event correlation) if you want to match up events in the log.