From: "Geo" 

"John Beckett"  wrote
in message news:lj71t113lhdm9s30lfn46gj7sp65bh0ph4{at}4ax.com...

> separate files sounds attractive to me. It sounds as if the tool that
> JohnC mentioned would be MUCH better than 'tail'.

It may well be but I don't usually syslog the spam filters cause I have
access to the admin interface which allows me to search and do what I need
from there.

The syslog would be for the techs to have access so they don't have to get
me to check the logs when they need to confirm an email. The problem is I
don't want to give them direct access to the log file because mail logs are
very sensitive. Index server has the capability to display hits with a
preview which is enough information that it might work for them without
allowing them to make a copy of the log file.

A quick test though shows me this is unrealistic, no way is index server
going to work on a file that goes from zero to 400mb in 24 hours...

Geo.

--- BBBS/NT v4.01 Flag-5