Now that I have half of the equation solved (i.e. a better method of collecting log files using syslog-ng), does anyone have suggestions for the "other half", i.e. viewing tools that let me look at the log files without having to use grep with regular expressions and such? Compound text searches would be a great start... ! Thanks... Chris Ellis/ CIC Secure Perimeter