Hi, I've tried to summarize what the new db-parser() infrastructure does inside syslog-ng in a blog post, here: http://bazsi.blogs.balabit.com/ If you are insterested in using logs for anything more than merely storing it, please read the article. :) -- Bazsi