From: John Beckett 

"Geo"  wrote in message
news::
> I'm going to have to try this. My thought was to use a syslog function to
> get the spam filter box to log all activity to a server that the techs could
> access and search when someone has them looking for an email.

You never know, but I'm doubtful about this. Ideally, you would have a
separate log file for each day (or maybe each 8-hour period), and you would
want to search data that is NOT current. Then it would be good.

However, I imagine that you DO want to search current data and that would
be a problem because, first, there would be a delay before the data was
indexed, and second, the log file might be ignored by the indexing service
until it was closed. I have no idea on that point, but it is distinctly
possible.

Some tool which splits the log into separate files, then search the
separate files sounds attractive to me. It sounds as if the tool that JohnC
mentioned would be MUCH better than 'tail'.

John

--- BBBS/NT v4.01 Flag-5